---
id: 6306
title: "Gh0st and Pantegana: Two RATs that Refuse to Fade Away"
source_domain: hunt.io
source_url: "https://hunt.io/blog/gh0st-and-pantegana-two-rats-that-refuse-to-fade-away"
published_at: "2024-06-12T00:00:00Z"
tags: ["c2", "rat", "tls-certificates", "malware-infrastructure", "gh0st", "pantegana"]
phying_url: "https://phying.com/item/6306"
lang: en
---

# Gh0st and Pantegana: Two RATs that Refuse to Fade Away

## Summary

Hunt examines current infrastructure for two RATs: the long-lived Gh0st, detected via its 'Gh0st' packet flag, and the newer Go-based Pantegana, which uses customized certificates to evade scanners.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-06-12T00:00:00Z
- **Original:** https://hunt.io/blog/gh0st-and-pantegana-two-rats-that-refuse-to-fade-away
- **Phying News:** https://phying.com/item/6306