SSH backdoor

an eleven hour window, a key called svc-telemetry and persistence on three operating systems. a lab-only hunter built from the IOCs Cursor and Microsoft actually published.