VPNFilter botnet: a SophosLabs analysis, part 2