https://www.trellix.com/blogs/research/how-attackers-repackaged-a-threat-into-something-that-looked-benign/