Ghole

Description

(Trend Micro) GHOLE is a malware family derived from a modified Core Impact product. Core Impact is a penetration-testing product made by Core Security, a legitimate company.

Names

Name
Ghole
Gholee
CoreImpact (Modified)

Category

Tools

Type

• Vulnerability scanner

Information

• https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/operation-woolen-goldfish-when-kittens-go-phishing
• https://www.clearskysec.com/gholee-a-protective-edge-themed-spear-phishing-campaign/
• http://www.trendmicro.it/media/wp/operation-woolen-goldfish-whitepaper-en.pdf

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/win.ghole

Alienvault Otx

• https://otx.alienvault.com/browse/pulses?q=tag:ghole

Other Information

Uuid

eb0a13e3-f329-4d98-92fe-cda2a9f4b8ae

Last Card Change

2022-12-28