c2 infrastructure

The malware leaked itself, not the defenders.

Needle cryptostealer shipped with a plaintext API key in the Rust binary. One string exposed 1932 victims and the withdrawal config.