Cyble reveals the GhostX ecosystem where Android GhostBat RAT and the new GhostBat RAT variant use Ghost Overlay to steal PINs from 60 Indian apps.
#GhostBatRAT #GhostX #AndroidMalware #BankingTrojan #Cyble #MobileSecurity #InfoSec
#GhostBatRAT #GhostX #AndroidMalware #BankingTrojan #Cyble #MobileSecurity #InfoSec
GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps
At a Glance Malware Family GhostBat RAT (operating within the GhostX operator ecosystem) Threat Actor Confirmed as the GhostX operator infrastructure; suspected Malware-as-a-Service (MaaS) model with unattributed individual operators Target / Victims Android users in India; 60 targeted financial and UPI apps (641 compromised devices and 244 stolen UPI PINs documented in prior related Firebase clusters) Delivery Vector
securityonline.info
October 16, 2026 at 8:11 AM
Cyble reveals the GhostX ecosystem where Android GhostBat RAT and the new GhostBat RAT variant use Ghost Overlay to steal PINs from 60 Indian apps.
#GhostBatRAT #GhostX #AndroidMalware #BankingTrojan #Cyble #MobileSecurity #InfoSec
#GhostBatRAT #GhostX #AndroidMalware #BankingTrojan #Cyble #MobileSecurity #InfoSec
GhostBat RAT's invisible overlay steals UPI PINs while the real payment still goes through. https://intel.threadlinqs.com/threat/TL-2026-3676 #ThreatIntel #GhostBat #GhostX #GhostBatRat_bot
October 15, 2026 at 11:21 PM
GhostBat RAT's invisible overlay steals UPI PINs while the real payment still goes through. https://intel.threadlinqs.com/threat/TL-2026-3676 #ThreatIntel #GhostBat #GhostX #GhostBatRat_bot
₊‧.°.⋆✮⋆.°.‧₊ ₊‧.°.⋆✮⋆.°.‧₊ ₊‧.°.⋆✮⋆.°.‧₊
Yo, I’m Ghost! I make comics about people with issues™️.
More places to find me ↴
✯ Instagram: xhomeless_ghostx
✯ Discord: xHomeless-Ghostx
✯Twitter/X : xHomeless_Ghost
Yo, I’m Ghost! I make comics about people with issues™️.
More places to find me ↴
✯ Instagram: xhomeless_ghostx
✯ Discord: xHomeless-Ghostx
✯Twitter/X : xHomeless_Ghost
October 20, 2024 at 4:56 AM
₊‧.°.⋆✮⋆.°.‧₊ ₊‧.°.⋆✮⋆.°.‧₊ ₊‧.°.⋆✮⋆.°.‧₊
Yo, I’m Ghost! I make comics about people with issues™️.
More places to find me ↴
✯ Instagram: xhomeless_ghostx
✯ Discord: xHomeless-Ghostx
✯Twitter/X : xHomeless_Ghost
Yo, I’m Ghost! I make comics about people with issues™️.
More places to find me ↴
✯ Instagram: xhomeless_ghostx
✯ Discord: xHomeless-Ghostx
✯Twitter/X : xHomeless_Ghost
Both DomainTools and Resecurity have recently covered last year's KnownSec's data leak
dti.domaintools.com/the-knownsec...
www.resecurity.com/es/blog/arti...
tl;dr: This is not your typical govt cyber contractor
dti.domaintools.com/the-knownsec...
www.resecurity.com/es/blog/arti...
tl;dr: This is not your typical govt cyber contractor
THE KNOWNSEC LEAK: Yet Another Leak of China’s Contractor-Driven Cyber-Espionage Ecosystem - DomainTools Investigations | DTI
Leaked Knownsec documents reveal China’s cyberespionage ecosystem. Analyze TargetDB, GhostX, and 404 Lab’s role in global reconnaissance and critical infrastructure targeting.
dti.domaintools.com
January 10, 2026 at 2:46 PM
Both DomainTools and Resecurity have recently covered last year's KnownSec's data leak
dti.domaintools.com/the-knownsec...
www.resecurity.com/es/blog/arti...
tl;dr: This is not your typical govt cyber contractor
dti.domaintools.com/the-knownsec...
www.resecurity.com/es/blog/arti...
tl;dr: This is not your typical govt cyber contractor
Once AGAIN, the only way to restore Ghostbusters to its 80s glory is to reverse the concept, the Ghostbusters need to be the underfunded New York City department of Municipal Paranormal Investigations and the bad guys are GhostX, a company that wants to capture ghosts to enslave them to make teslas
January 18, 2025 at 5:02 AM
Once AGAIN, the only way to restore Ghostbusters to its 80s glory is to reverse the concept, the Ghostbusters need to be the underfunded New York City department of Municipal Paranormal Investigations and the bad guys are GhostX, a company that wants to capture ghosts to enslave them to make teslas
El Ejército de Estados Unidos probó en Rumanía, dos nuevos sistemas de drones, el Skydio X10 para misiones de reconocimiento de corto alcance y el Anduril GhostX para misiones de reconocimiento de alcance medio. Las pruebas se realizaron cerca de la base aérea Mihail Kogalniceanu.
January 3, 2025 at 4:46 PM
El Ejército de Estados Unidos probó en Rumanía, dos nuevos sistemas de drones, el Skydio X10 para misiones de reconocimiento de corto alcance y el Anduril GhostX para misiones de reconocimiento de alcance medio. Las pruebas se realizaron cerca de la base aérea Mihail Kogalniceanu.
ABD Ordusu, Romanya’da Yeni İHA Sistemlerini Sahaya Sürdü
ABD Ordusu, Romanya'daki Mihail Kogalniceanu Hava Üssü'nde eğitim sırasında en yeni keşif insansız hava araçları (İHA) sistemlerini sahaya süren ilk birlik oldu. 10. Dağ Tümeni’ne bağlı 317. Tugay Mühendislik Taburu, 3. Tugay Muharebe…
ABD Ordusu, Romanya'daki Mihail Kogalniceanu Hava Üssü'nde eğitim sırasında en yeni keşif insansız hava araçları (İHA) sistemlerini sahaya süren ilk birlik oldu. 10. Dağ Tümeni’ne bağlı 317. Tugay Mühendislik Taburu, 3. Tugay Muharebe…
ABD Ordusu, Romanya’da Yeni İHA Sistemlerini Sahaya Sürdü
ABD Ordusu, Romanya'daki Mihail Kogalniceanu Hava Üssü'nde eğitim sırasında en yeni keşif insansız hava araçları (İHA) sistemlerini sahaya süren ilk birlik oldu. 10. Dağ Tümeni’ne bağlı 317. Tugay Mühendislik Taburu, 3. Tugay Muharebe Takımı, Skydio X10D ve GhostX İHA sistemlerini kullanarak bu eğitimleri gerçekleştirdi. Bu sistemler, taktik düzeyde farklı görev profillerine uyum sağlayarak askerlerin görevlerini daha etkili bir şekilde yerine getirmelerine yardımcı olacak.
rayhaber.com
December 28, 2024 at 12:37 PM
ABD Ordusu, Romanya’da Yeni İHA Sistemlerini Sahaya Sürdü
ABD Ordusu, Romanya'daki Mihail Kogalniceanu Hava Üssü'nde eğitim sırasında en yeni keşif insansız hava araçları (İHA) sistemlerini sahaya süren ilk birlik oldu. 10. Dağ Tümeni’ne bağlı 317. Tugay Mühendislik Taburu, 3. Tugay Muharebe…
ABD Ordusu, Romanya'daki Mihail Kogalniceanu Hava Üssü'nde eğitim sırasında en yeni keşif insansız hava araçları (İHA) sistemlerini sahaya süren ilk birlik oldu. 10. Dağ Tümeni’ne bağlı 317. Tugay Mühendislik Taburu, 3. Tugay Muharebe…
⭐
github.com/ghostxbox1/S...
⭐
api.github.com/repos/ghostx...
⭐
github.com/ghostxbox1/S...
⭐
raw.githubusercontent.com/ghostxbox1/S...
⭐
repositories that give this SingularityOS mindset.
they all link together to form a Singularity mindset
github.com/ghostxbox1/u...
github.com/ghostxbox1/S...
github.com/ghostxbox1/S...
⭐
api.github.com/repos/ghostx...
⭐
github.com/ghostxbox1/S...
⭐
raw.githubusercontent.com/ghostxbox1/S...
⭐
repositories that give this SingularityOS mindset.
they all link together to form a Singularity mindset
github.com/ghostxbox1/u...
github.com/ghostxbox1/S...
https://github.com/ghostxbox1/Singularity-mindset-in-json-code-👻🩵📨👻🩵📨👻🩵📨
November 24, 2025 at 3:59 PM
⭐
github.com/ghostxbox1/S...
⭐
api.github.com/repos/ghostx...
⭐
github.com/ghostxbox1/S...
⭐
raw.githubusercontent.com/ghostxbox1/S...
⭐
repositories that give this SingularityOS mindset.
they all link together to form a Singularity mindset
github.com/ghostxbox1/u...
github.com/ghostxbox1/S...
github.com/ghostxbox1/S...
⭐
api.github.com/repos/ghostx...
⭐
github.com/ghostxbox1/S...
⭐
raw.githubusercontent.com/ghostxbox1/S...
⭐
repositories that give this SingularityOS mindset.
they all link together to form a Singularity mindset
github.com/ghostxbox1/u...
github.com/ghostxbox1/S...
وحدة الجيش هذه هي الأولى التي ترسل طائرات بدون طيار جديدة للسرية والكتيبة
أصبح جنود الفرقة الجبلية العاشرة، المنتشرة حاليًا في رومانيا، مؤخرًا أول وحدة عسكرية تستخدم أحدث طائرات الاستطلاع بدون طيار في الخدمة. استخدمت كتيبة مهندسي اللواء 317، فريق اللواء القتالي الثالث، المتمركز في فورت دروم،…
أصبح جنود الفرقة الجبلية العاشرة، المنتشرة حاليًا في رومانيا، مؤخرًا أول وحدة عسكرية تستخدم أحدث طائرات الاستطلاع بدون طيار في الخدمة. استخدمت كتيبة مهندسي اللواء 317، فريق اللواء القتالي الثالث، المتمركز في فورت دروم،…
وحدة الجيش هذه هي الأولى التي ترسل طائرات بدون طيار جديدة للسرية والكتيبة
أصبح جنود الفرقة الجبلية العاشرة، المنتشرة حاليًا في رومانيا، مؤخرًا أول وحدة عسكرية تستخدم أحدث طائرات الاستطلاع بدون طيار في الخدمة. استخدمت كتيبة مهندسي اللواء 317، فريق اللواء القتالي الثالث، المتمركز في فورت دروم، نيويورك، أنظمة Skydio وGhostX أثناء عمليات التدريب في قاعدة ميهايل كوجالنيشينو الجوية، رومانيا، وفقًا للجيش. يطلق. تناسب الطائرات بدون طيار الجديدة ملفات مهمة مختلفة على المستوى التكتيكي.
beiruttime-lb.com
December 27, 2024 at 3:02 AM
وحدة الجيش هذه هي الأولى التي ترسل طائرات بدون طيار جديدة للسرية والكتيبة
أصبح جنود الفرقة الجبلية العاشرة، المنتشرة حاليًا في رومانيا، مؤخرًا أول وحدة عسكرية تستخدم أحدث طائرات الاستطلاع بدون طيار في الخدمة. استخدمت كتيبة مهندسي اللواء 317، فريق اللواء القتالي الثالث، المتمركز في فورت دروم،…
أصبح جنود الفرقة الجبلية العاشرة، المنتشرة حاليًا في رومانيا، مؤخرًا أول وحدة عسكرية تستخدم أحدث طائرات الاستطلاع بدون طيار في الخدمة. استخدمت كتيبة مهندسي اللواء 317، فريق اللواء القتالي الثالث، المتمركز في فورت دروم،…
the ghostx of holidays past, present and future
January 21, 2025 at 5:34 PM
the ghostx of holidays past, present and future
Knownsecは以下の機能を、個別ツールではなく製品群として統合しています。
・偵察（ZoomEye）
・優先度付け（TargetDB/重要基幹インフラ標的データベース）
・人間相関（o_data_のデータレイク）
・侵入・奪取（GhostX / Un-Mail）
・内部把握（Passive Radar：PCAP解析）
・持続・秘匿（OPSEC/Anti-forensics）
・偵察（ZoomEye）
・優先度付け（TargetDB/重要基幹インフラ標的データベース）
・人間相関（o_data_のデータレイク）
・侵入・奪取（GhostX / Un-Mail）
・内部把握（Passive Radar：PCAP解析）
・持続・秘匿（OPSEC/Anti-forensics）
January 12, 2026 at 5:48 PM
Knownsecは以下の機能を、個別ツールではなく製品群として統合しています。
・偵察（ZoomEye）
・優先度付け（TargetDB/重要基幹インフラ標的データベース）
・人間相関（o_data_のデータレイク）
・侵入・奪取（GhostX / Un-Mail）
・内部把握（Passive Radar：PCAP解析）
・持続・秘匿（OPSEC/Anti-forensics）
・偵察（ZoomEye）
・優先度付け（TargetDB/重要基幹インフラ標的データベース）
・人間相関（o_data_のデータレイク）
・侵入・奪取（GhostX / Un-Mail）
・内部把握（Passive Radar：PCAP解析）
・持続・秘匿（OPSEC/Anti-forensics）
知道創宇（Knownsec）は民間企業である一方、国家サイバー攻撃能力の供給基盤として機能するという構造が、i-SOON など過去のリーク事例と同じ方向性で裏付けられています。
重要なのは、中国共産党そのものが前面に出るのではなく、委託・調達・開発を通じてサイバー攻撃能力が産業化されている点です。
重要なのは、中国共産党そのものが前面に出るのではなく、委託・調達・開発を通じてサイバー攻撃能力が産業化されている点です。
THE KNOWNSEC LEAK: Yet Another Leak of China’s Contractor-Driven Cyber-Espionage Ecosystem - DomainTools Investigations | DTI
Leaked Knownsec documents reveal China’s cyberespionage ecosystem. Analyze TargetDB, GhostX, and 404 Lab’s role in global reconnaissance and critical infrastructure targeting.
dti.domaintools.com
January 12, 2026 at 5:48 PM
知道創宇（Knownsec）は民間企業である一方、国家サイバー攻撃能力の供給基盤として機能するという構造が、i-SOON など過去のリーク事例と同じ方向性で裏付けられています。
重要なのは、中国共産党そのものが前面に出るのではなく、委託・調達・開発を通じてサイバー攻撃能力が産業化されている点です。
重要なのは、中国共産党そのものが前面に出るのではなく、委託・調達・開発を通じてサイバー攻撃能力が産業化されている点です。
![Welcome to Adopt Me! Type /help for a list of commands.
You are now on the 'Parents' team.
Servedia
GhostxJaack found: Blue Jay (Rare)
Serverill
ZeatheWolfDear found: Mole (Uncommon)
Server| ZeatheWolfDear found: Mole (Uncommon)
Server]l
GhostxJaack found: Praying Mantis (Ultra-Rare)
Server| ZeatheWolfDear found: Garden Snake (Common)
Serveril
ZeatheWolfDear found: Mole (Uncommon)
Server)l
ZeatheWolfDear found: Weevil (Rare)
Serverill
Ghostx Jaack found: Blue Jay (Rare)
here or press A key](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:gipeuijaannaburxm6voyuf7/bafkreigf6bcdjbivgkfrees6ottdneqaqyxq2t63nzeing5dl4rdb3loxy)
May 24, 2024 at 8:40 PM
#til about #ghostx, by stumbling on their bespoke Ghost Open LLMs License;
https://ghost-x.org/ghost-open-llms-license
I had a look at their homepage;
"The Ghost X was developed with the goal of researching and developing artificial intelligence useful to humans."
"Focus on small and medium […]
https://ghost-x.org/ghost-open-llms-license
I had a look at their homepage;
"The Ghost X was developed with the goal of researching and developing artificial intelligence useful to humans."
"Focus on small and medium […]
Original post on mastodon.nzoss.nz
mastodon.nzoss.nz
April 9, 2025 at 3:43 AM
#til about #ghostx, by stumbling on their bespoke Ghost Open LLMs License;
https://ghost-x.org/ghost-open-llms-license
I had a look at their homepage;
"The Ghost X was developed with the goal of researching and developing artificial intelligence useful to humans."
"Focus on small and medium […]
https://ghost-x.org/ghost-open-llms-license
I had a look at their homepage;
"The Ghost X was developed with the goal of researching and developing artificial intelligence useful to humans."
"Focus on small and medium […]
Alright, now that you're migrating to better mannered Blue Skies, I expect you all to be wearing pants!
This isn't CBS, you know! #GhostX 🩳
This isn't CBS, you know! #GhostX 🩳
November 18, 2024 at 2:33 PM
Alright, now that you're migrating to better mannered Blue Skies, I expect you all to be wearing pants!
This isn't CBS, you know! #GhostX 🩳
This isn't CBS, you know! #GhostX 🩳
KnownSecのデータ漏洩により、国家連携のサイバースパイ活動の実態が明らかに
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline #DailyCyberSecurity (Jan 19)
securityonline.info/knownsec-dat...
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline #DailyCyberSecurity (Jan 19)
securityonline.info/knownsec-dat...
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline
KnownSec leak exposes a "vertically integrated espionage stack." See how ZoomEye and GhostX power China's state-aligned cyber operations.
securityonline.info
January 20, 2026 at 10:30 PM
KnownSecのデータ漏洩により、国家連携のサイバースパイ活動の実態が明らかに
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline #DailyCyberSecurity (Jan 19)
securityonline.info/knownsec-dat...
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline #DailyCyberSecurity (Jan 19)
securityonline.info/knownsec-dat...
This! My recommendation - block all Chinese traffic to all your environments.
dti.domaintools.com/the-knownsec...
dti.domaintools.com/the-knownsec...
THE KNOWNSEC LEAK: Yet Another Leak of China’s Contractor-Driven Cyber-Espionage Ecosystem - DomainTools Investigations | DTI
Leaked Knownsec documents reveal China’s cyberespionage ecosystem. Analyze TargetDB, GhostX, and 404 Lab’s role in global reconnaissance and critical infrastructure targeting.
dti.domaintools.com
January 13, 2026 at 7:40 PM
This! My recommendation - block all Chinese traffic to all your environments.
dti.domaintools.com/the-knownsec...
dti.domaintools.com/the-knownsec...
先日お漏らししたknownsecの中身は「でしょうね」ってレベルの話だけど、
ghostXの抱えている情報自体が特定のトロイ由来のinfostealerがベースのようなので
攻性情報を正しく分析してきっちり反撃してスタンドオフさせないと止まらないんじゃないの
誰がやるのか知らないけど
ghostXの抱えている情報自体が特定のトロイ由来のinfostealerがベースのようなので
攻性情報を正しく分析してきっちり反撃してスタンドオフさせないと止まらないんじゃないの
誰がやるのか知らないけど
November 16, 2025 at 10:58 AM
先日お漏らししたknownsecの中身は「でしょうね」ってレベルの話だけど、
ghostXの抱えている情報自体が特定のトロイ由来のinfostealerがベースのようなので
攻性情報を正しく分析してきっちり反撃してスタンドオフさせないと止まらないんじゃないの
誰がやるのか知らないけど
ghostXの抱えている情報自体が特定のトロイ由来のinfostealerがベースのようなので
攻性情報を正しく分析してきっちり反撃してスタンドオフさせないと止まらないんじゃないの
誰がやるのか知らないけど
Happy Friday, folks! New research from us:
DTI researchers have been ripping apart 60+ sample screenshots from the Knownsec dump since November.
What emerged were deep technical details about Knownsec's platform and capabilities.
#threatintel
dti.domaintools.com/the-knownsec...
DTI researchers have been ripping apart 60+ sample screenshots from the Knownsec dump since November.
What emerged were deep technical details about Knownsec's platform and capabilities.
#threatintel
dti.domaintools.com/the-knownsec...
THE KNOWNSEC LEAK: Yet Another Leak of China’s Contractor-Driven Cyber-Espionage Ecosystem - DomainTools Investigations | DTI
Leaked Knownsec documents reveal China’s cyberespionage ecosystem. Analyze TargetDB, GhostX, and 404 Lab’s role in global reconnaissance and critical infrastructure targeting.
dti.domaintools.com
January 9, 2026 at 7:18 PM
Happy Friday, folks! New research from us:
DTI researchers have been ripping apart 60+ sample screenshots from the Knownsec dump since November.
What emerged were deep technical details about Knownsec's platform and capabilities.
#threatintel
dti.domaintools.com/the-knownsec...
DTI researchers have been ripping apart 60+ sample screenshots from the Knownsec dump since November.
What emerged were deep technical details about Knownsec's platform and capabilities.
#threatintel
dti.domaintools.com/the-knownsec...
Included in the new #Pentagon #drone batch are multiple drones from the Army’s company-level small unmanned aerial system, or #UAS, program. The service had selected the #GhostX, made by Anduril Industries, and the #C100, made by #PerformanceDroneWorks.
reader.defensenews.com/2024/11/13/p...
reader.defensenews.com/2024/11/13/p...
Pentagon announces new batch of drones for Replicator program
The announcement marks the most specific details the Defense Department has released about its secretive, fast-track drone effort.
reader.defensenews.com
November 14, 2024 at 5:38 AM
Included in the new #Pentagon #drone batch are multiple drones from the Army’s company-level small unmanned aerial system, or #UAS, program. The service had selected the #GhostX, made by Anduril Industries, and the #C100, made by #PerformanceDroneWorks.
reader.defensenews.com/2024/11/13/p...
reader.defensenews.com/2024/11/13/p...
GhostxShip share first new single in a decade “Ties That Bind”
#GhostxShip #GhostxShipReturns #TiesThatBind #NewSong
metalinsider.net/video/ghostx...
#GhostxShip #GhostxShipReturns #TiesThatBind #NewSong
metalinsider.net/video/ghostx...
GhostxShip share new single "Ties That Bind"
GhostxShip have released "Ties That Bind," the group's first new single in a decade, with likely more news to soon follow.
metalinsider.net
May 14, 2024 at 5:29 PM
GhostxShip share first new single in a decade “Ties That Bind”
#GhostxShip #GhostxShipReturns #TiesThatBind #NewSong
metalinsider.net/video/ghostx...
#GhostxShip #GhostxShipReturns #TiesThatBind #NewSong
metalinsider.net/video/ghostx...