Dark web market remote access trojan samples show how attackers maintain persistence.
https://git.synapsenet.net/gaylebyatt9478/mammie2012/wiki/Dark-web-market-gift-cards