tldr: some malware uses DNS to exfiltrate data (to obfuscate it, and probably that DNS is often whitelisted), and now they are using the same exfiltration techn

tldr: some malware uses DNS to exfiltrate data (to obfuscate it, and probably that DNS is often whitelisted), and now they are using the same exfiltration technique but using DNS over HTTPS.