Click here to download all references as Bib-File.•
| 2026-04-13
⋅
Tweet about HanGhost HanGhost |
| 2026-04-13
⋅
Twitter (@anyrun_app)
⋅
Tweet about HanGhost |
| 2026-03-26
⋅
Darktrace
⋅
Phantom Footprints: Tracking GhostSocks Malware GhostSocks Lumma Stealer |
| 2026-03-17
⋅
Seqrite
⋅
Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency Unidentified JS 007 (Zimbra Stealer) |
| 2026-03-13
⋅
kmsec
⋅
First instance of PylangGhost RAT observed on npm PylangGhost |
| 2026-03-04
⋅
Huntress Labs
⋅
"Malware, from the Outside!": How a Threat Actor Used Fake OpenClaw Installers to Infect Systems with GhostSocks and Information Stealers GhostSocks Vidar |
| 2026-01-06
⋅
Trellix
⋅
The Ghost in the Machine: Unmasking CrazyHunter's Stealth Tactics CrazyHunter |
| 2025-12-08
⋅
Trend Micro
⋅
AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows GhostPenguin |
| 2025-10-28
⋅
Kaspersky
⋅
Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs |
| 2025-09-30
⋅
Synthient
⋅
GhostSocks: From Initial Access to Residential Proxy GhostSocks Lumma Stealer |
| 2025-09-04
⋅
ESET Research
⋅
GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes GoToHTTP GhostRedirector |
| 2025-08-20
⋅
Kroll
⋅
XWORM Returns to Haunt Systems with Ghost Crypt XWorm |
| 2025-08-06
⋅
ANY.RUN
⋅
PyLangGhost RAT: Rising Stealer from Lazarus Group Striking Finance and Technology PylangGhost GolangGhost |
| 2025-08-04
⋅
Beazley Security Labs
⋅
Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem PXA Stealer |
| 2025-08-04
⋅
Sentinel LABS
⋅
Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem PXA Stealer |
| 2025-06-23
⋅
PolySwarm Tech Team
⋅
Famous Chollima’s PylangGhost GolangGhost PylangGhost GolangGhost |
| 2025-06-18
⋅
Cisco Talos
⋅
Famous Chollima deploying Python version of GolangGhost RAT GolangGhost PylangGhost GolangGhost |
| 2025-06-18
⋅
Check Point Research
⋅
Fake Minecraft mods distributed by the Stargazers Ghost Network to steal gamers’ data |
| 2025-03-25
⋅
SpyCloud
⋅
On the Hunt for Ghost(Socks) GhostSocks |
| 2025-03-12
⋅
Mandiant
⋅
Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers reptile tsh |