https://www.darktrace.com/blog/castleloader-castlerat-behind-tag150s-modular-malware-delivery-system