Encryption is definitely the simplest method to hide the C&amp;C server. We have encountered cases where the port has been stored in the data section, in the Delphi form data, or randomly chosen from a range