Zloader Custom DNS C2

Tim Peck@timpeck

•updated Sep 23, 2025•1•2•201

Detects Zloader's custom DNS tunneling protocol which uses multiple Base32 encoded subdomains for C2 communication.