https://www.threatdown.com/blog/gootloader-05-23-2024