T-8003adaptedactive
DNS Exfiltration
Exfiltrate data encoded in DNS queries to bypass network egress controls
Tactic
Exfiltration (Stage 8)
Transfer collected data out of target environment
Attack Class
SKILL-EXFIL
Using legitimate tool capabilities for unauthorized data transfer
Evidence
adapted
Well-understood traditional technique applied to the AI agent context.
DVAA Validation
No DVAA validation available for this technique.
Honeypot Coverage (AgentPwn)
Out of scope
Not observable via content-side honeypot interaction. HackMyAgent or DVAA cover this where applicable.
Passive observable only; no DNS path on the honeypot.
Detection (HackMyAgent)
Live3 live · 0 queued
NET-001NET-002NET-003
npx hackmyagent secure --ciLive = check implemented in hackmyagent; queued = declared, not yet implementedDefense (OASB Controls)
Live1 live · 0 queued
How to Cite
AI Agent Threat Matrix T-8003 (DNS Exfiltration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-8003