Proofpoint found the PackClient RAT sold on Telegram and used by Chinese-speaking TA4922 malware operators in tax-themed phishing attacks.

Related Posts:

• Malicious Browser Extensions Drain Crypto Wallets
• Amatera Password Stealer Abuses Service Workers and Smart Contracts
• Miraak Post Exploitation Framework Adopts Database C2

The post PackClient RAT: New C2 Framework Sold on Telegram appeared first on Daily CyberSecurity.