OTX Threat: DNS as C2 in Noir, An AI-Developed Crypto Wallet Drainer

A cryptocurrency wallet-drainer kit called Noir uses DNS TXT records and DNS-over-HTTPS (DoH) as a dynamic command-and-control mechanism. The loader queries public DoH services to discover active infrastructure hosted on Cloudflare Pages, allowing operators to redirect deployed lures by changing a single DNS record. The drainer does not require victims to enter seed phrases or private keys; instea