Unit 42 exposed CL-CRI-1171, a pay-per-install network using gaming videos and poisoned downloads to spread Insomnia RAT, ARKTunnel, and Docro Hijacker via trojanized installers and scanner-blocking checks. #OfferLoader #InsomniaRAT #ARKTunnel