The Root Password Changed at 10:17 and Nobody Logged In — The VM Console Path Your Firewall Never Sees

A presales war story about a Linux VM whose root password changed with no login in any log — the swapped guest-tools agent behind it, the password stealer that came with it, and the checks I now run b