Malware
Golden Gh0st RAT
- First Reported
- Oct 31, 2026
- Latest Reported
- Oct 31, 2026
Reported Context (2)
- Two weeks after signing this file, the same certificate signed IEProc.exe, a downloader for Golden Gh0st RAT, which Expel attributes to the GoldenEyeDog (APT-Q-27). Signed Windows Utility Loader Delivers GodRAT Through Process Injection
- That kit hides inside a genuine Tencent game component and ends in Golden Gh0st RAT, a backdoor built on the Gh0st RAT source code, which was published in 2008 and has been reused in attacks ever since. Technical Analysis Links Three-Stage IEProc Chain and Golden Gh0st RAT to APT-Q-27
Malware (3)
Threat Actors (3)
MITRE ATT&CK (20)
Vendors (2)
Products (4)
Tools (13)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.