Re:ISP Association Nominates Mozilla as “Internet Villain”
by ubercow13 on Thursday July 04, 2019 @10:52PM
(#20359506)
Does this really matter? I am sure there are other ways malware could work around DNS blocking if it was motivated to
[ Parent
| on HN ]
Re:ISP Association Nominates Mozilla as “Internet Villain”
by throw0101a on Friday July 05, 2019 @10:04AM
(#20362573)
It depends on the malware. If it's self-contained and only goes around encrypting things and then prints a message to send money to a pre-defined particular Bit Coin address, then it won't matter.
If it needs to phone home or otherwise contact an outside address (excluding hard-coded IP addresses), then presumably it needs it needs to do a DNS look-up at some point.
Many botnets use pseudo-random DNS domains, and when the generation algorithm was figured out, people were able to get control of it: