discovered 2026-06-23
Host state artifacts (install nonce + machine id) written by the Rust infostealer second stage (Amazon Inspector).