Hacking ICS Via DNS

Reid Wightman of Digital Bond Labs goes over two important methods that adversaries can use DNS to hack ICS.

The beginning covers DNS basics, so if you know that skip to

5:15 Survey of various DNS squatting on 11 ICS vendor site names

24:40 DNS for exfiltration or establishing tunnels with command and control servers. In 2016 this still works frequently as DNS is allowed outbound to resolve Internet addresses.