TI Mindmap HUB
Threat Intelligence Report

Carry-On Compromise: TA4922 Packs PackClient

📅 August 28, 2026 📰 www.proofpoint.com 🔍 0 CVE(s) referenced

Chinese-speaking threat actor TA4922 is leveraging the sophisticated, Telegram-marketed PackClient RAT framework to target organizations in Asia via tax-themed phishing campaigns, signaling a broader trend of modular malware proliferation within the Chinese cybercrime ecosystem.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle