Once connected to the threat actors' infrastructure, the infected device can now be used as a proxy server and sold to other threat actors. Connectivity diagram (BitSight) When connecting to the ...