How One Infostealer Infection Solved a Global Supply Chain Mystery

Posting this here for posterity because holy crap what a read. A Lumma infection gave up, among others things, definitive proof of DPRK attribution for the Polyfill compromise. Also solid details on fake IT employee tradecraft.