Just a heads up that web link in attribution is old and has been taken over by some AD malware group apparently.