Malware
BLACKCOFFEE
aka PNGRAT · gresim · ZoxPNG
a backdoor that obfuscates its communications as normal traffic to legitimate websites such as Github and Microsoft's Technet portal.
BLACKCOFFEE, also known as PNGRAT, gresim, ZoxPNG, is a Windows malware family operated by APT41, Aurora Panda and others.
Background
A backdoor that disguises its command-and-control traffic as ordinary requests to legitimate sites like Github and Microsoft's Technet portal.
Source: Malpedia (Fraunhofer FKIE).