Malware
GhostWeaver
- First Reported
- Jun 19, 2026
- Latest Reported
- Jun 19, 2026
Reported Context (2)
- loader) and MintsLoader, which, in turn, lead to the deployment of additional payloads like GhostWeaver, LockBit, AsyncRAT, and NetSupport RAT. Operation Endgame Takes Down 106 SocGholish Servers and Cleans Nearly 15,000 WordPress Sites
- delivering loaders like Gholoader and MintsLoader, which eventually led to payloads such as the GhostWeaver PowerShell backdoor, LockBit and RansomHub ransomware, and AsyncRAT or NetSupport RAT backdoors. Authorities Disrupt SocGholish Botnet, Clean Nearly 15,000 WordPress Sites
Malware (8)
People (1)
Threat Actors (15)
MITRE ATT&CK (1)
Products (5)
Tools (2)
Industries (14)
Countries (11)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.