Re:An Analysis of Godlua Backdoor
by sky_nox on Wednesday July 03, 2019 @08:47PM
(#20350526)
It's interesting this malware uses DNS over HTTPS to avoid detection.
[ Parent
| on HN ]
The first, according to Cisco Talos: https://twitter.com/infosec_nick/status/1146069799899938816
It doesn't. At least not in the "DNS over HTTPS - the protocol specified in an RFC" sense:
https://twitter.com/bagder/status/1146740062127886338