◆HighMalwareActiveNov 5, 2026· updated Nov 10QiAnXin XLab says it captured a suspicious script, cwpsrv_update.