value: Our roadmap is pretty simple: add a custom PAM module that logs the credential in plaintext and send it to our C&C though a DNS resolution.
name: Modify Authentication Process: Pluggable Authentication Modules