persistence 3

• Telegram Handles, Binary-Encoded PHP, and a Relay Shell: Inside a WordPress Webshell Compromise Jun 12, 2026
• Fake captcha, five layers of RC4, and a Rust stealer with LSA session enumeration and AD recon Jun 11, 2026
• Bring Your Own Node: a PowerShell stager, a blockchain dead-drop, and a RAT that runs on the real Node.js May 30, 2026