https://googleprojectzero.blogspot.com/2016/06/how-to-compromise-enterprise-endpoint.html