Attacker "passed commands and results through the exploit chain’s HTTPS requests rather than a separate C2 channel, with no ...