Almost identical to the one from back in March 2021 except this uses convert-server.com as the exfiltration domain.