Proofpoint found the PackClient RAT sold on Telegram and used by Chinese-speaking TA4922 malware operators in tax-themed phishing attacks. Related Posts: Malicious Browser Extensions Drain Crypto Wallets Amatera Password Stealer Abuses Service Workers and Smart Contracts Miraak Post Exploitation Framework Adopts Database C2 The post PackClient RAT: New C2 Framework Sold on Telegram appeared first on Daily CyberSecurity.