other
C-based backdoor and updated Deed RAT variant, first documented by Elastic Security Labs in October 2023 in REF5961 activity, used here as a China-nexus indicator.
No current published clusters are mapped here yet.