https://www.welivesecurity.com/2021/10/27/wslink-unique-undocumented-malicious-loader-runs-server/