loader 2 Fake captcha, five layers of RC4, and a Rust stealer with LSA session enumeration and AD recon Jun 11, 2026 The Node.js loader that locks its own strings to the folder it lives in Jun 10, 2026