LucidPawn OAST Beacon DNS Query to digimg.store/dnslog.ink

Ibrahim Saud@tektrix

•updated Sep 22, 2026•0•0•4

Detects DNS queries indicative of OAST (Out-of-Band Application Security Testing) infrastructure usage by the LucidPawn dropper, specifically targeting domains associated with dnslog.ink and digimg.store. This pattern suggests potential beaconing or exfiltration attempts.