What RL Found Before Anthropic’s Midnight Blizzard Report

**ReversingLabs analysis of Anthropic’s report:** RL observed and classified multiple builds of a Go backdoor and PowerShell stager tied to a Russia-linked espionage operator before Anthropic’s publication; while AI sped up rebuilds and shortened the useful life of hashes, core malicious behaviors (hidden execution, data collection, persistence and C2 beacons) remained detectable, so defenders should prioritize behavioral hunting, historical telemetry and infrastructure enrichment over sole reliance on static hashes.