https://www.esentire.com/blog/socket-puppet-how-ransomhub-affiliates-pull-the-strings