Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OSINT - RDGAs: The Next Chapter in Domain Generation Algorithms

The threat titled "OSINT - RDGAs: The Next Chapter in Domain Generation Algorithms" refers to an open-source intelligence (OSINT) campaign analyzing the evolution and use of Randomized Domain Generation Algorithms (RDGAs). Domain Generation Algorithms (DGAs) are techniques used by malware to algorithmically generate a large number of domain names that can be used as rendezvous points for command and control (C2) servers. RDGAs represent an advancement in this technique, likely introducing more sophisticated randomness or evasion capabilities to avoid detection and blocking by traditional security controls. This campaign appears to focus on gathering intelligence and analyzing network data to understand these new RDGA patterns, rather than reporting an active exploit or vulnerability. The information is sourced from CIRCL, a reputable cybersecurity research organization, and is categorized under OSINT with a perpetual lifetime and moderate certainty (50%). No specific affected software versions or patches are identified, and there are no known exploits in the wild. The threat level is rated as low, indicating limited immediate risk. The campaign emphasizes skills in network data analysis, suggesting that defenders and analysts can leverage network telemetry to detect and mitigate RDGA-based threats. Overall, this campaign provides valuable insights into emerging DGA techniques that could be leveraged by threat actors in the future, but currently does not represent an active or critical security vulnerability.

SocGholish/TA569 affiliate traditional DGA domains

Revolver Rabbit RDGA domains used as C2 / decoy domains for XLoader malware

Detailed information about OSINT - RDGAs: The Next Chapter in Domain Generation Algorithms. Get real-time updates, technical details, and mitigation strategies.

Title	Severity	Type	Source	Date

Threats Tagged 'misp-galaxy:nice-framework-skills="skill in performing network data analysis - s0688"'

Filter Threats