The malware’s unique blockchain-enabled backup C2 scheme makes it difficult to eliminate completely.
Threatpost