The campaign, tracked as Flooding Dropper, generates accounts and package names through automated interpolation of legitimate package strings — ...