A weekend in the wool: mapping a Chinese reward-farming underground from one GitHub repo

A weekend that started with a grep.app search for leaked password prefixes and ended in a 16-actor Chinese reward-farming (薅羊毛) ecosystem: its script DRM, its C2, its credential theft, and the civic apps it targets.