https://www.systemtek.co.uk/2018/03/royalcli-and-royaldns-backdoors/