Hiding in plain sight: the FAKEM remote access trojan