Reported By: Bill Demirkapi, Hou JingYi (@hjy79425575) of qihoo 360 CERT, Nichlas Holm Jørgensen of Danish Cyber Defence