DanaBleed: DanaBot C2 Server Memory Leak Bug

**Executive summary:** This analysis describes the DanaBleed memory-leak vulnerability in DanaBot introduced in June 2022, where a C2 protocol change caused uninitialized padding in Delphi TMemoryStream to leak up to 1,792 bytes of C2 process memory per response—exposing backend C2 infrastructure, private keys, developer changelogs, debug paths, SQL statements, and large volumes of victim credentials and exfiltrated data over an extended period.