https://unit42.paloaltonetworks.com/script-based-malware/