Security News SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer TheHackerNews Daniel Bender 17 Feb 2026 SmartLoader campaign spreading StealC via a trojanized Oura MCP server using fake GitHub forks to steal credentials and crypto funds.