Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Ebury has implemented a fallback mechanism to begin using a DGA when the attacker hasn't connected to the infected system for three days.