Malware
GHOSTFORM
- First Reported
- Mar 2, 2026
- Latest Reported
- Jul 16, 2026
Reported Context (2)
- Similarly, ZScaler ThreatLabz observed several “fingerprints” of generative AI in the TWINTALK and GHOSTFORM malware used by Iran-linked threat actor Dust Specter (who overlaps with the APT34 subcluster tracked as Report: AI Is Scaling Iran’s Cyber and Influence Operations, Not Transforming Its Playbook
- ThreatLabz discovered previously undocumented malware including SPLITDROP, TWINTASK, TWINTALK, and GHOSTFORM. Dust Specter Campaign Targets Iraqi Government Officials With Four Undocumented Malware Tools
Malware (8)
People (11)
Threat Actors (25)
MITRE ATT&CK (11)
Vendors (13)
Products (31)
Industries (10)
Countries (11)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.