discovered 2026-08-04
Bedrock Analytics logger. Compromised via sitthidet_arv account. Variant B payload.