Another important note is they used a dns tunnel.