Tag multi-stage malware infection