https://securityintelligence.com/x-force/hive0051-malicious-operations-enabled-dns-fluxing/