SprySOCKS Windows Variant Abuses Kernel Drivers to Evade Detection

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

I used MCP Ghidra and Claude Code to find 9 kernel driver vulnerabilities on my gaming laptop