discovered 2026-08-04
Bedrock Analytics auth-sso-backend. Compromised via sitthidet_arv account. Variant B payload.