What is a Fast Flux?

Fast flux is a DNS technique used to mask botnets by quickly shifting among a network of compromised hosts, acting as proxies, enabling cybercriminals to delay or evade detection.

Fast flux enables botnets to hide behind rapidly shifting network of compromised hosts, acting as proxies. Using the fast flux, botnets quickly shift among these IP addresses, enabling cybercriminals to delay or evade detection.

When phishing or distributing malware, these botnets hide behind a rapidly shifting network of compromised hosts acting as proxies, employing a variety of Internet Protocol (IP) addresses associated with a legitimate domain name.

Using the fast flux (also known as flux domain) technique, the botnets shift among these IP addresses, enabling cybercriminals to delay or evade detection.

LEARN MORE ABOUT FAST FLUX AND RELATED TECHNOLOGIES

• Complementing Commonly Used Security Technologies – Solution Note
• Designing A Secure DNS Architecture — Whitepaper

FROM THE INFOBLOX COMMUNITY

• Using Big Data to Outsmart Cybercriminals
• Improved Security Through DNS Inspection