MuddyWater: ClickFix to Telegram & PatchAgent Backdoor

Full reverse engineering of a three-stage PatchAgent loader chain assessed as MuddyWater-linked with high confidence — from a regsvr32-executed COM dropper through an AES-256-CBC PTCH v2 container to…