GhostPenguin
- First seen
- 2019-07-15 00:00:00
- Malware type
- backdoor, rat
- Family
- Malware family
- Last IoC activity
- 2026-07-18 22:36:22
- Profile updated
- 2026-07-07 14:25:10
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
GhostPenguin is a highly sophisticated remote access tool used primarily in cyber-espionage campaigns targeting government and technology sectors. It enables attackers to gain unauthorized access, monitor activities, and exfiltrate sensitive data.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Ghostpenguin (report)
- Trend Micro — Ghostpenguin (report)