fileless 2 No File, No Fixed C2: Inside NetCon, a WMI Backdoor That Reads Its Command Server Off the Blockchain Jul 10, 2026 The "SharePoint Helper" That Was Really a Localhost Backdoor Jun 6, 2026