The RDAT tool uses email as a C2 channel, with attachments that hide data and commands inside images.
Source: Threadpost