PsiXBot Now Using Google DNS over HTTPS and Possible New Sexploitation Module | Proofpoint US
Brad on Twitter: "2019-12-11 - #SpelevoEK sends #PsiXBot - #pcap of the infection traffic, a Fiddler saz capture of the PsiXBot traffic, the associated malware/artifacts, and some IOCs are available at: https://t.co/c59iMlvPdS
PsiXBot malware upgraded with Google DNS over HTTPS, sexploitation kit | ZDNET