I know; it really depends on the kind of network the malware is deployed into. If it's some quant trading group on wall street, or the Treasury department, usi

I know; it really depends on the kind of network the malware is deployed into. If it's some quant trading group on wall street, or the Treasury department, using EDNS for CNC would be outstanding camoflauge. If it's some single-purpose server farm then yeah, of course, stands out like a sore thumb.