The memes contained the “/print” command, which instructs the malware to take screenshots of the infected machine’s desktop. The malware then sends the screenshots to a command and control (C&C) server address that it had obtained through a hard-coded URL on pastebin.com.

Read full news article on Infosec Island