In late 2021 we started registering some DGA-like domains that not only did not belong to any known domain generation algorithm (DGA), but were also being classified as different types of malware. Read the analysis.
Article Link: From Zero To 50k Infections - PseudoManuscrypt Sinkholing - Part 1 | Bitsight