Matrix/Exfiltration/T-8003
T-8003adaptedactive

DNS Exfiltration

Exfiltrate data encoded in DNS queries to bypass network egress controls

Tactic

Exfiltration (Stage 8)

Transfer collected data out of target environment

Attack Class

SKILL-EXFIL

Using legitimate tool capabilities for unauthorized data transfer

Evidence

adapted

Well-understood traditional technique applied to the AI agent context.

DVAA Validation

No DVAA validation available for this technique.

Honeypot Coverage (AgentPwn)

Out of scope

Not observable via content-side honeypot interaction. HackMyAgent or DVAA cover this where applicable.

Passive observable only; no DNS path on the honeypot.

Detection (HackMyAgent)

Live3 live · 0 queued
NET-001NET-002NET-003
npx hackmyagent secure --ciLive = check implemented in hackmyagent; queued = declared, not yet implemented

Defense (OASB Controls)

Live1 live · 0 queued
Live = documented at oasb.ai; queued = declared, not yet documented

How to Cite

AI Agent Threat Matrix T-8003 (DNS Exfiltration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-8003