https://www.crowdstrike.com/blog/fake-recovery-manual-used-to-deliver-unidentified-stealer/