Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale
Researchers studying cybersecurity have provided additional information about SecShow, a Chinese actor that has been seen performing Domain Name System (DNS) globally since at least June 2023.
Dr. Renée Burton and Dave Mitchell, security researchers at Infoblox, claim that the attacker is based out of the China Education and Research Network (CERNET), a government-funded initiative.
In a study that was released last week, they stated that these probes look for and measure DNS responses at open resolvers. Although the ultimate purpose of the SecShow operations is unknown, the information obtained is only for the actor's benefit and may be utilized for malevolent purposes.
However, there's some evidence that suggests it might have been connected to some sort of academic study that ...