Identifying APT Malware Domain Based on Mobile DNS Logging

Figure 5

Recognition at different threshold.