PhantomCore is a threat actor group known for using a remote access malware called PhantomRAT. They have been observed executing malicious code throug...
Actor Overview
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on PhantomCore is published.
Actor Details
Primary Name
PhantomCore
Data Source
Precursor Intelligence