https://www.forcepoint.com/blog/x-labs/phishing-script-inside-darkgate-campaign