discovered 2026-07-22
Stealer staging directory where browser data, wallets, keys, and Keychain are collected before archiving; cleared after upload.
