Skip to content
MalwareWiki

Malware

InsidiousGh0st

RAT. Functionality like ExecShell, GetFileList/SendFile/DownloadFile, Socks5, PortmapManager/GetConn/SendConn.

InsidiousGh0st is a Linux malware family operated by Unfading Sea Haze.

Background

A remote access trojan whose capabilities include ExecShell, GetFileList/SendFile/DownloadFile, Socks5, and PortmapManager/GetConn/SendConn. Its transport layer also has support for Quic.

Variants exist written in C# and GO.

Source: Malpedia (Fraunhofer FKIE).