THREATOPS
THREAT OPSThreat News › Inside a TrickBot Variant Using DNS Tunneling for C2

Inside a TrickBot Variant Using DNS Tunneling for C2

lowfortinet_researchPublished 2026-07-22

<p>FortiGuard Labs analyzes a TrickBot variant that uses DNS tunneling for C2 communication, modular execution, and employs persistence and obfuscation techniques</p><img align="left" alt="" border="0" height="1" hspace="0" src="https://feeds.fortinet.com/~/i/961655441/0/fortinet/blog/threat-research" style="border: 0; float: left; margin: 0; padding: 0; width: 1px!important; height: 1px!important

Indicators of compromise

Original source: https://feeds.fortinet.com/~/961655441/0/fortinet/blog/threat-research~Inside-a-TrickBot-Variant-Using-DNS-Tunneling-for-C