Skip to content

MalKamak

Also reported as Operation GhostShell. Linked to Iran by three sources.

Reports: 3
Last reported: 6 April 2026
Origin: Iran

ID: malkamak
Sources: MISP ETDA Malpedia
Merge evidence: 2 alias matches

Reports per quarter

2021 Q4: 2 reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: no reports
2023 Q3: no reports
2023 Q4: no reports
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: no reports
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2021 Q4 to 2026 Q2.

Reports

6 April 2026

Operation GhostShell: Novel RAT Targets Global Aerospace and Telecoms Firms

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Operation GhostShell: Novel RAT Targets Global Aerospace and Telecoms Firms
7 October 2021

Operation GhostShell_ Novel RAT Targets Global Aerospace and Telecoms Firms

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation GhostShell_ Novel RAT Targets Global Aerospace and Telecoms Firms
6 October 2021

Operation GhostShell: Novel RAT Targets Global Aerospace and Telecoms Firms

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation GhostShell: Novel RAT Targets Global Aerospace and Telecoms Firms

Newest first. Details opens the report in Explore.