GOFFEE

Reports per quarter

CVEs named in reports

• CVE-2018-0171 KEV
• CVE-2025-29824 KEV ransomware
• CVE-2025-32433 KEV
• CVE-2025-49704 KEV ransomware
• CVE-2025-49706 KEV ransomware
• CVE-2025-53770 KEV ransomware
• CVE-2025-53771
• CVE-2025-6218 KEV
• CVE-2025-8088 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 19 December 2025

   Tracing a Paper Werewolf campaign through AI-generated decoys and Excel XLLs

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Tracing a Paper Werewolf campaign through AI-generated decoys and Excel XLLs

2. 1 December 2025

   APT and financial attacks on industrial organizations in Q3 2025 | Kaspersky ICS CERT EN

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor APT and financial attacks on industrial organizations in Q3 2025 | Kaspersky ICS CERT EN

3. 10 April 2025

   GOFFEE continues to attack organizations in Russia

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor GOFFEE continues to attack organizations in Russia

Newest first. Details opens the report in Explore.