Cleafy traced nearly 100 RatHat console deployments since April 2026, with the platform building malware and using Gemini to ...