[Intel]: https://stairwell.com/news/chamelgang-and-chameldoh-a-dns-over-https-implant/

### Area

Malware reports

### Parent threat

Command and Control

### Finding

https://stairwell.com/news/chamelgang-and-chameldoh-a-dns-over-https-implant/

### Industry reference

attack:T1572:Protocol Tunneling

### Malware reference

ChamelDoh
wltm

### Actor reference

ChamelGang

### Component

Linux

### Scenario

_No response_