BeyondTrust disclosed a critical Remote Support flaw after Chinese APT Armory Castle exploited it as a zero-day for 47 days, using Sawfly web shell and Bareclaw SOCKS5 tunnel for https://deafnews.it/en/article/beyondtrust-chinese-apt-armory-castle-exploited-zero-day-for-47-days