Tracing a Multi-Vector Malware Campaign: From VBS to Open Infrastructure