2 ms·They should have exfiltrated to Tor, using a DGA, or a corporate-friendly network like OneDrive.by ddtaylor 8y agoThey should have exfiltrated to Tor, using a DGA, or a corporate-friendly network like OneDrive.