C3po large-scale study of covert monitoring of c&c servers via over-permissioned protocol infiltration.pdf