China-linked TA4922 uses AI‑assisted malware to expand globally
Proofpoint reports that the Chinese‑speaking cybercrime group TA4922 has expanded from East Asia into Europe and Africa, deploying new malware families such as Atlas RAT, RomulusLoader, SilentRunLoader and ValleyRAT. Analysts say the rapid growth of its toolkit is driven by large‑language‑model assistance, accelerating development and evasion.