value:  Doki has used the DynDNS service and a DGA based on the Dogecoin blockchain to generate C2 domains. ;; Ebury has used a DGA to generate a domain name for C2. ;; Grandoreiro can use a DGA for hiding C2 addresses including use of an algorithm with a user-specific key that changes daily. ;; MiniDuke can use DGA to generate new Twitter URLs for C2. ;; Ngrok can provide DGA for C2 servers through the use of random URL strings that change every 12 hours. ;; POSHSPY uses a DGA to derive command and control URLs from a word list. ;; ShadowPad uses a DGA that is based on the day of the month for C2 servers. ;; TA551 has used a DGA to generate URLs from executed macros. ;; Ursnif has used a DGA to generate domain names for C2.
name: Dynamic Resolution: Domain Generation Algorithms