But the output of all the commands still sends to the C&C server, so I don't see how this protects that. Unless, as the other user suggested, the memes could actually also contain the IP to use for the C&C server. So the "order" is akin to "upload username to ###.##.###.#"