🎯 Persistence establishment

The items that name it 3

• The Closed Quorum: Inside the First Reported Autonomous AI C2 Implant
  writeup2026-09-22

  establishPersistence() invoked when Decision field routes to 'persist'

• How the RaaS Business Model Actually Works
  article2026-07-01

  Observed via Cloudflared and OpenSSH in the SonicWall-to-Akira incident

• Socket: 141 Mastra npm Packages Compromised via Typosquatted Dependency
  writeup2026-06-20

  stage-2 implant installs login persistence via Windows Run key (NvmProtocal), macOS LaunchAgent (com.nvm.protocal), and Linux systemd user unit (nvmconf.service)