Identifying APT Malware Domain Based on Mobile DNS Logging

Figure 3

Distribution of the number of domain queries initiated by internal devices.