I know that some have already observed the Mystic-stealer popping up across the internet (at least 3 easily discoverable C2/panel-servers).

Now it would appear as if the TA have begun advertising the product based on information from XSS.

· · Web · 0 · 0 · 0