Iranian hacker group becomes first known APT to weaponize DNS-over-HTTPS (DoH)

Oilrig is most likely using DoH as an exfiltration channel to avoid having its activities detected or monitored while moving stolen data.