steganography 2 Five layers deep for a stealer: reversing the "PuppetKing" ClickFix chain that ended in StealC Jun 25, 2026 A driver that wasn't a driver: dissecting a steganographic PowerShell beacon May 23, 2026