Newly identified malicious campaigns are linked to virtual private servers modified by APT28 to operate as malicious DNS ...