Look at this thread for some thoughts on the autopilot problem: https://twitter.com/giorgio_montana/status/962740192334422017
Potentially useful article on DNS:
https://www.sans.org/reading-room/whitepapers/analyst/securing-dns-emerging-threats-hybrid-approach-37692