Dohdoor C2 Communication via DNS-over-HTTPS (DoH)

Elgonad .@elgonad

•updated Feb 26, 2026•1•0•39

Detects processes associated with Dohdoor malware making network connections to Cloudflare's DNS-over-HTTPS service for C2 domain resolution.