discovered 2026-09-18
Dropped attacker artifact written and executed by the implant (Slack and blockchain paths). Not a mathjs file, so the strongest on-disk path signature.