DNS C2 Beaconing - High-Frequency Queries to Long Subdomain Labels

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•3

Detects high-frequency DNS query patterns characterized by long, potentially encoded, subdomain labels (exceeding 40 characters) that are indicative of DNS-based command and control (C2) beaconing activity.