(Note: I used current community reports and typical malware behaviors to summarize common patterns.)