https://mamchenkov.net/wordpress/2013/05/31/i-saw-a-compromised-server-today-being-used-for-mi/