Since the decline of peer-to-peer botnets it's been difficult to track malware infections externally. But smart contract based C2 infrastructure provided us with unique insights into this campaign. https://expel.com/blog/clearfake-new-lotl-techniques/