https://blog.talosintelligence.com/threat-actors-leveraging-document-publishing-sites/