Encrypted C2 Channels … DNS-over-HTTPS, or other encrypted protocols for C2.

Command & Control Command and control communication involves establishing a persistent channel between the attacker and the compromised system for sending commands and receiving results. The attacker uses this channel to manage malware, launch new attack phases, and retrieve data.

Domain Fronting Technique of hiding C2 traffic behind legitimate CDN domains.

Malware Delivery Malware delivery encompasses the methods by which malicious software is transferred to a target system. This includes infected attachments, compromised websites, malicious ads, removable media, and compromised software updates.

DNS Tunneling Technique of exfiltrating data or C2 communication through DNS queries.

Fast-Flux DNS Rapid rotation of IP addresses associated with a C2 domain.

Indicator Removal Steganography for hiding C2 commands in images