DNS exfiltration

DNS exfiltration is a cybersecurity attack technique in which traffic is exfiltrated from a computer network using the DNS protocol.

DNS exfiltration may be performed in environments that restrict various forms of outbound traffic, but allow outbound DNS. It may also be performed in cases where DNS visibility is lacking but HTTP and other more traditional forms of traffic are scrutinized to evade detection.

---