If the C2 server responds with HTTP 200 (rather than the expected 302 redirect that delivers encrypted commands), the DLL treats this as a server-side kill command. It runs the same cleanup: wipe registry, schedule file deletion, exit.

This is some next-level evil shit.

Q: What happens to your commitment to child safety?

Fisher-Price has, for nearly a century, ensured that no toy contained a small part that could be swallowed by a child under three years of age. We are pleased to report that our autonomous weapons systems do not contain small parts.

Dare you to try explaining all this to your elderly relatives.

https://spectrum.ieee.org/the-real-story-of-stuxnet

Giving all those people with stupid, penis-oriented, middle-school email acoounts a second chance.

If you need a plain scope, the Rigol entry-level ones are all decent. But if specifically looking at serial/CAN, may want to take a look at a Saleae-8. The device is headless and comes with probes. Connects to a computer via USB. The software runs on the computer and is what sets them apart.

If too expensive, suggest finding a used 8 and not succumb to cheapo knockoffs on EBay. The software gets regularly updated and runs only on their devices. That alone is worth the investment. You can even extend it by writing your own analyzer code to handle event sequences.

No relation. Just a happy long-time owner of a Saleae-16. Has saved my bacon a few times. Also have an old DS1054, but haven’t had to use it for eons.