https://www.mandiant.com/resources/blog/rm3-ldr4-ursnif-banking-fraud