Graphalgo malware campaign

Graphalgo malware in a Terraform provider stays inert until two variables hash to one digest

Aikido found the Graphalgo campaign's Go port inside two Terraform providers, one of them a typosquat of kreuzwerker/docker. The payload decrypts only when containerName and networkID hash to a hardcoded SHA256.