Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
high threatRATMalware Family
Historical
Gh0st RAT
High severity
5.3k
IOCs Tracked
—
First Seen
—
Last Seen
0
YARA Rules
Associated IOCs5,254 total · showing 50
IP48
91.202.233.2142026-08-23High
162.248.225.1652026-08-23High
46.151.182.2052026-08-23High
221.207.101.1752026-08-23High
5.101.86.982026-07-04High
5.101.86.1052026-07-06High
15.204.95.2282026-08-07High
178.16.54.2482026-06-23High
88.119.167.1432026-08-17High
109.73.193.2422026-08-23High
84.21.189.2252026-06-20High
158.247.194.1442026-08-19High
163.181.208.792026-08-23High
139.159.203.442026-08-23High
137.184.163.272026-08-23High
154.88.97.412026-07-15High
18.118.196.2442026-07-02High
146.70.41.1742026-07-30High
47.236.24.1122026-07-02High
38.181.42.1602026-07-16High
Related Reports30 shown
North Korean IT Workers Scheme: Detection IOCs and Tactics for Government and Corporate SOCs
ANY.RUN Cybersecurity BlogAug 20, 2026
How Grok unknowingly powers cybercrime
ThreatDownAug 19, 2026
OpenPhish (300 entries)
OpenPhish
Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup
ANY.RUN Cybersecurity BlogAug 10, 2026
Detecting Certighost (CVE-2026-54121): Sigma Coverage Across the Full Attack Chain
Nextron SystemsAug 4, 2026
Nearly 1 in 4 Exploited Vulnerabilities Are Attacked Before or on Disclosure Day
Cyber PressJul 30, 2026
Researchers Link Chinese Cyber Vendor to PLA’s RedRelay Covert Attack Network
Cyber PressJul 28, 2026
Russian-Speaking Hacker Jailbreaks Claude Opus to Build AI Pentesting Tool
Cyber PressJul 22, 2026
DigiCert Security Breach Linked to GoldenEyeDog Certificate Hijacking Campaign
Cyber PressJul 20, 2026
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
Abuse.ch URLhaus
Threat Profile
TypeRAT
StatusHistorical
IOCs tracked5,254