Tag: gophish

2 Attack Reports | 0 Vulnerabilities

Attack reports

Middle East Malicious Infrastructure Report: 1,350+ C2 Servers Mapped Across 98 Providers

Between February and May 2026, over 1,350 active command-and-control servers were identified across 98 infrastructure providers spanning 14 Middle Eastern countries. Saudi Arabia's STC hosted 981 C2 servers, representing 72.4% of all regional malicious infrastructure, the largest concentration glob…

Published: May 21, 2026

Linked vulnerabilities : CVE-2025-11953 (CVSS 9.8)

Downloadable IOCs: 5

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

A new phishing campaign targeting Russian-speaking users employs the open-source Gophish framework to deliver DarkCrystal RAT and a novel remote access trojan called PowerRAT. The attack utilizes modular infection chains, either through malicious Microsoft Word documents or HTML files with embedded…

Published: October 22, 2024

Downloadable IOCs: 2

Click here to see more Attack Reports