The botnet is being skillfully used to launch “highly evasive” password-spraying attacks.