A credential stealer called sckit hooked into MemTensor MemOS at the runtime level — bypassing install-time scanners, ...