#SprySOCKS

SprySOCKS Crosses Over: Windows Variants Surface With Driver-Level Hiding

Two undocumented Windows builds of the China-linked backdoor, tagged WIN_DRV and WIN_PLUS, extend a toolset previously seen only on Linux.