Advanced Attackers Hiding Inside Encrypted Traffic at the Endpoint