“The command-and-control server can also query for a list of all 3rd party apps and request uploads of their container directories.”