Unverified50% confidenceFactExact time
Even when a sandbox blocks conventional outbound HTTP/HTTPS connections, DNS resolution requests are often still permitted, thereby creating an escape path.
1
Sources
50%
Confidence
Long-term
Relevance
9/27/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedNearly all network environments allow DNS query traffic to pass through, making it susceptible to abuse as a channel for data exfiltration or command delivery.76% similarUnverifiedDNS queries are almost never blocked by enterprise firewalls, and traditional security devices focus their monitoring on HTTP/HTTPS traffic while giving insufficient scrutiny to DNS traffic.75% similarUnverifiedDNS tunneling is commonly used to bypass the authentication portals of paid Wi-Fi networks, or as a covert communication channel (C2 channel) for malware.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/952998API
curl https://kongchang.com/api/v1/knowledge/claims/952998MCP
get_claim(id=952998)