https://www.team-cymru.com/post/inside-the-icedid-backconnect-protocol