Sunburst: How the malware works, and who was targeted
blog.truesec.com