gcman
- First seen
- 2015-04-15 00:00:00
- Malware type
- backdoor, rat
- Family
- Malware family
- Profile updated
- 2026-07-07 12:48:36
Targeted industries: financial-services government-and-public-sector
Targeted regions: country_code:ru country_code:gb
Context
Gcman is a sophisticated backdoor and remote access tool primarily used for financial espionage and targeting government entities. It is known for its stealth and persistence, often used in targeted attacks within Russia and the United Kingdom.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Gcman_Auto (yara-rule)
Reports & references
- Kaspersky — 73638 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Gcman (report)