TrickBot Turns Ordinary DNS Traffic Into a Hidden Channel for Malware Commands