📎 Full indicator list (SHA256, IPs, registry changes) available in the comments.

Here’s a professional, news-style post suitable for a cybersecurity blog, threat intelligence feed, or social media (LinkedIn / Twitter / InfoSec forum):