Перейти к основному содержимому

1 запись с тегом "dga"

Посмотреть все теги

⚔️ OpenBLD.net — Algorithm (zBLD) vs. Algorithm (DGA)

· 1 мин. чтения
Yevgeniy Goncharov
Maintainer of OpenBLD.net

🥷 OpenBLD.net — Algorithm (zBLD) vs. Algorithm (DGA)

Malware and botnets use DGA (Domain Generation Algorithm)—algorithms that generate hundreds of "trash" domains per second to communicate with C2 servers.

An attack example from real OpenBLD logs:

  • s-dfgfd-sdfz...zdssragv[.]mom
  • 96bccebb2f7e...wu7y6z[.]com
  • 60r...60pg0131[.]cc
  • and billions of similar ones...

What's the harm?

Aside from the obvious malicious intent, this chaotic spam clogs the cache, hammers I/O, chews up CPU time, and generates gigabytes of junk logs. As a result—speed degradation and high resource utilization.