The fourth HTML smuggling sample uncovered by Trustwave SpiderLabs was an Xworm RAT, which is a .NET-compiled malware capable of monitoring user activities including keystrokes and screen activities.