[solarkraft]

Good article. I am not so bothered by the effects, I think they complement the article well. I sure like that what may seem like decoration to some readers is actually real - I find it very interesting to find out that they find the malware using nmap.

Now where do I get that script? More detail would of course always be nice.

[yorwba]

Git repo was linked by OP in this [dead] subthread: https://news.ycombinator.com/item?id=20514267

The nmap script was written by ThyssenKrupp's security division and can be found here: https://github.com/TKCERT/winnti-nmap-script/blob/master/win...