Comfoo's network traffic is encrypted and encapsulated in HTTP requests and responses, although some variants skip the encapsulation step. Payloads are encrypted by a 10byte static XOR key that is hard-coded inside the Comfoo binary. Initial login data from