First-ever malware strain spotted abusing new DoH (DNS over HTTPS) Godlua, a Linux DDoS bot, is the first-ever malware strain seen using DoH to hide its DNS traffic. Go Here to read about this from Catalin Cimpanu @ ZDnet.