browser-hijack 1 StudioSecGhost: A Browser-Piggyback hVNC Agent That Skips the Hidden Desktop May 18, 2026