
“Red October”. Detailed Malware Description 5. Second Stage of Attack
In the Device notification callback function, the module logs each connection and disconnection event. When a device is connected, it starts a new thread that manipulates this device