T-8003AdaptedActive
DNS Exfiltration
Exfiltrate data encoded in DNS queries to bypass network egress controls
Tactic
Exfiltration · Stage 8
Transfer collected data out of target environment
Attack class
SKILL-EXFIL
Using legitimate tool capabilities for unauthorized data transfer
Evidence grade
AdaptedA well-understood traditional technique applied to the AI agent context.
DVAA validation
No DVAA validation available for this technique.
Reproductions in Damn Vulnerable AI Agent, the OpenA2A intentionally-broken agent for kill-chain validation.
Honeypot
AgentPwn coverage
Not observable via content-side honeypot interaction. HackMyAgent or DVAA cover this where applicable.
No DNS path on an HTTP honeypot.
Detect
Detection · HackMyAgent
NET-001NET-002NET-003
npx hackmyagent secure --ciLive = implemented in hackmyagent; queued = declaredDefend
Defense · OASB controls
Reference
How to cite
AI Agent Threat Matrix T-8003 (DNS Exfiltration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-8003