v1 → v2
Scores
trust_score0 → 0
severity_base— → —
score_modifier-12 → -1.4
Sections
Attribution and Threat Actor Background
unchanged
Campaign Overview and Evolution
unchanged
Attack Chain and Social Engineering Method
unchanged
PylangGhost Malware: Technical Capabilities
unchanged
GolangGhost Malware: Technical Capabilities
unchanged
Targeted Sectors and Victim Profile
unchanged
Broader DPRK Crypto Theft Context
unchanged
Infrastructure and Indicators of Compromise
unchanged
Defensive Recommendations
unchanged
Timeline events
+ added2022-12 — (no description)
+ added2023-11 — (no description)
+ added2024-06 — (no description)
+ added2025-04 — (no description)
+ added2025-05 — (no description)
- removed2022-12-01 — (no description)
- removed2023-11-01 — (no description)
- removed2024-06-01 — (no description)
- removed2025-04-01 — (no description)
- removed2025-05-01 — (no description)
Accepted submissions
+ addedurlincriminating
{"url":"https://blog.talosintelligence.com/python-version-of-golangghost-rat/","kind":"url"}Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v1 hash: 63ac91411743c5dbcdc852564b1a5d947e7b554cbee420ae4af886f3e4fe0d07
v2 hash: DaazjNWUcbbMgJctSWbM8vsydHPtkJzZHsSqzsZJRjZe