In which we discuss an actor deploying a mitigation for the Citrix vuln, but also appearing to have a backdoor.

https://www.fireeye.com/blog/threat-research/2020/01/vigilante-deploying-mitigation-for-citrix-netscaler-vulnerability-while-maintaining-backdoor.html