HoneyMyte Takes CoolClient Into the Kernel: When a Rootkit Changes What Windows Lets You See

Summary CoolClient was already a fully capable espionage backdoor: keylogging, clipboard theft, credential harvesting, file management, system reconnaissance, and a plugin-based extension architecture