Malware
PylangGhost
- First Reported
- Jun 18, 2025
- Latest Reported
- Oct 16, 2025
Reported Context (2)
- variants of credential and cryptocurrency remote access trojans (RATs) known as GolangGhost and PylangGhost. BeaverTail and OtterCookie Add Keylogging and Screenshot Capabilities
- In May 2025, Cisco Talos identified a Python-based remote access trojan (RAT) we call “PylangGhost,” used exclusively by a North Korean-aligned threat actor. PylangGhost is functionally similar to the previously North Korean-Aligned Famous Chollima Uses Python PylangGhost RAT in Fake Job Scams
Malware (4)
People (2)
Threat Actors (2)
MITRE ATT&CK (19)
Vendors (1)
Products (23)
Tools (4)
Industries (2)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.