Macs infected with malware are programmed to check a control server every hour to see if there are any new commands or binaries to execute