Use CISA's official AA23-187A advisory. Verify both reported delivery paths, the behavior of each follow-on tool, the exact environment and artifact details, and Teleport's collection and encryption design.