DNS TXT records, originally designed for arbitrary text data such as email authentication (SPF, DKIM, DMARC) and domain verification, have become a target for cybercriminals. Attackers encode malware ...

Hackers are stashing malware in a place that’s largely out of the reach of most defenses—inside domain name system (DNS) records that map domain names to their corresponding numerical IP addresses.