Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth
HoneyMyte deploys an updated CoolClient backdoor with a signed Windows rootkit that hides malicious processes, files, registry objects, and C2 data.
More info