Discovers Multiyear Sophisticated Chinese DNS Operation
Essential information
- Published
- 29/04/2024 15:18
- Modified
- 01/05/2024 23:02
- Tags
- china dns great firewall nation-state sophisticated
- Related entities
- 10 observables, 1 intrusion sets (apt), 14 techniques (mitre)
Description
This report unveils a previously undisclosed multiyear operation conducted by a sophisticated actor called Muddling Meerkat. The operation employs Domain Name System (DNS) queries, open DNS resolvers, and interacts with China's Great Firewall. The tactics demonstrate the actor's ability to conduct extended covert operations, analogous to the recent compromise of the xz open source library. Muddling Meerkat appears to be a Chinese nation-state actor leveraging DNS infrastructure for unclear motives.