ShadowV2 spreads a Mirai-based botnet during the AWS outage, testing scale across IoT devices. Scattered LAPSUS$ Hunters expand to Zendesk with typosquatted domains and fake support tickets. A legacy PyPI bootstrap script exposes packages to domain takeover.