Anatomy of Evolving Impersonation Campaigns Distributing Gh0st RAT

Executive Summary

We have identified two interconnected malware campaigns active throughout 2025, using large-scale brand impersonation to deliver Gh0st remote access Trojan (RAT) variants to Chinese-speaking users. From the…

Continue Reading