Botnet uses Evernote as C&C server.
blog.trendmicro.com