GhostPenguin
- First seen
- 2019-07-15 00:00:00
- Malware type
- backdoor, rat
- Family
- Malware family
- Related IoCs
- 1 (1 malicious)
- Last IoC activity
- 2026-10-17 10:35:09
- Profile updated
- 2026-07-07 14:25:10
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
GhostPenguin is a highly sophisticated remote access tool used primarily in cyber-espionage campaigns targeting government and technology sectors. It enables attackers to gain unauthorized access, monitor activities, and exfiltrate sensitive data.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Ghostpenguin (report)
- Trend Micro — Ghostpenguin (report)