discovered 2026-05-27
Wave 1 package from terminal3airport. Same Scramjet proxy adware payload as changiairportpromax.