PsiXBot Now Using Google DNS over HTTPS and Possible New Sexploitation Module
released on 2019-09-10 @ 01:25:37 PM
Since posting our last PsiXBot update, the group or actor behind this malware has continued to make changes. Most notably, we have observed:
The introduction of DNS over HTTPS
A new version number (1.0.3)
New Fast Flux infrastructure
A newly observed "PornModule"
Distribution via Spelevo EK