Malware
Gorem RAT
- First Reported
- Mar 27, 2026
- Latest Reported
- Apr 3, 2026
Reported Context (2)
- CL-STA-1048 deployed diverse tooling—EggStremeFuel, Masol RAT, Gorem RAT, and TrackBak—to bypass XDR and establish footholds. Unit 42 Details Three-Cluster Cyberespionage Campaign Targeting Southeast Asian Government
- The campaigns deployed tools including EggStremeFuel, Masol, EggStreme loader (Gorem RAT), TrackBak stealer, and the Hypnosis loader delivering FluffyGh0st, with overlaps in TTPs suggesting links to China-aligned actors Unit 42 Details Three Cyberespionage Clusters Targeting a Southeast Asian Government
Malware (13)
Threat Actors (8)
MITRE ATT&CK (11)
Vendors (1)
Products (8)
Tools (2)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.