[rwth-security] How to Detect Malware C2 with DNS Status Codes