GOREshell

Malware type
webshell
Profile updated
2026-07-07 14:25:23

Targeted industries: government-and-public-sector technology-and-telecommunications

Context

GOREshell is a type of web shell used for cyber espionage purposes, often deployed on compromised web servers to provide remote access to attackers. It is linked to incidents involving targeted attacks against government and telecommunications sectors.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Elf.Goreshell (report)
  • cert.ssi.gouv.fr — Certfr 2025 Cti 009 (report)
  • sentinelone.com — Follow The Smoke China Nexus Threat Actors Hammer At The Doors Of Top Tier Targets (report)

External references