APT / THREAT GROUP
InsidiousGh0st
3
aliases
Last seen:Mar 17, 2026
Intelligence Profile
RAT. Functionality like ExecShell, GetFileList/SendFile/DownloadFile, Socks5, PortmapManager/GetConn/SendConn. Transport also supports Quic.
Variants in C# and GO.
Threat Analysis
InsidiousGh0st is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.
External References
Quick Facts
TypeAPT / Threat Group
Aliases3
Also Known As
elf.insidiousgh0stInsidiousGh0stosx.insidiousgh0st
External Intelligence
Malpedia: osx.insidiousgh0stResearch Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.