Threat Actor
GoldenEyeDog
- First Reported
- Sep 2, 2026
- Latest Reported
- Oct 31, 2026
Reported Context (3)
- Expel attributes the IEProc.exe downloader campaign, which delivered Golden Gh0st RAT, to GoldenEyeDog. The article gives GoldenEyeDog as an alias for APT-Q-27; it does not attribute the GodRAT activity to this group. Signed Windows Utility Loader Delivers GodRAT Through Process Injection
- The article describes GoldenEyeDog as a Chinese cybercrime group and says CylindricalCanine is its subgroup; Expel attributes Golden Gh0st RAT to that subgroup. Technical Analysis Links Three-Stage IEProc Chain and Golden Gh0st RAT to APT-Q-27
- The article says ValleyRAT has been known to be used by this group. Fake Software Sites Deliver Malware That Disables Windows Update and Weakens Defender
Malware (6)
People (1)
Threat Actors (4)
MITRE ATT&CK (23)
Vendors (3)
Products (7)
Tools (14)
Industries (9)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.