A packetFlag “xy” was found inside this Gh0st RAT variant     This Gh0st RAT variant implements additional features for stealing QQ messenger user information, for example, a list of users on a given machine and their QQ messenger numbers.