Comment by mycall

The wild part of DNS is that port 53 is typically open on firewalls and is excellent for data exfiltration/infiltration.