Skip to content

DNS TXT record payload delivery

Named by 2 kept items in this workspace.

Search every workspace for DNS TXT record payload delivery. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Russian AI Slopsquatting Publishes 700+ Malicious NPM Packages
    writeup2026-08-06It is written here as DNS TXT record payload delivery (fallback channel).

    When HTTPS fails, downloader queries a count TXT record (c.<domain>) then numbered TXT records (0.<domain>, 1.<domain>, ...) and Base64-decodes the joined chunks into a binary payload

  • AI Security Briefing
    article2026-07-18

    The malicious command to spawn a reverse shell is pulled from a DNS TXT record rather than hosted in the repository, allowing the payload to be changed at any time and evading static repository analysis

All techniques in this workspace.