Heimdal™ Security Discovers Gangs Hiding Behind Multiple Domains to Avoid TTPC Detection ‘Multi-process malware’ Eluding TTPC (=Threat-to-Process Correlation) and Behavioral-Based detection February 7, 2020 https://heimdalsecurity.com/blog/gangs-hiding-behind-multiple-domains-to-avoid-ttpc-detection/