Autoencoder Is All You Need: Profiling and Detecting Malicious DNS Traffic
Palo Alto Unit 42 details an autoencoder-based method that profiles DNS traffic to detect C2 and malicious domains, blocking ~374,000 malicious DNS requests daily.
40
Vendor
Advanced URL Filtering
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
3 articles · newest firstBeneath the Surface: Detecting and Blocking Hidden Malicious Traffic Distribution Systems
Unit 42 built an ML-based detector for malicious traffic distribution systems, finding malicious TDS chains average longer redirections and more URLs than legitimate ones.
40
The Smishing Deluge: China-Based Campaign Flooding Global Text Messages
Unit 42 attributes a global smishing campaign with 194,000+ phishing domains impersonating tolls, banks, and couriers to the Smishing Triad.
72
Appears with
- Palo Alto Networksorganization · 3
- Palo Alto Networksvendor · 3
- Advanced DNS Securityvendor · 3
- Unit 42organization · 3
- Advanced URL Filteringproduct · 2
- Advanced DNS Securityproduct · 2
- Smishing Triadthreat actor · 1
- U.S. residentsvictim · 1
- Dominet (HK) Limitedorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.