Forensic investigations uncover malware running inside lightweight VMs on Windows hosts, revealing advanced evasion and persistence tactics since July 2025. A complex cyber operation has been linked ...