I'm not really sure why this is being characterized as an emerging threat. VPN-over-DNS and all kinds of DNS based exfiltration were quite popular a couple of decades ago. Still, most people don't really secure their DNS properly even still.

It seems someone is just trying to drum up business with this; it's not a new thing.