August 28, 2026
- Chinese-speaking TA4922 has switched to PackClient, a modular commodity C2 framework bought off a malware marketplace, after months of AI-generated loaders — Proofpoint tracks the shift from vibe-coded custom tooling to purchased capability (DataBreachToday). · Aug 28 · observed · Threat Activity