Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:00:33 UTC
Home > List all groups > List all tools > List all groups using tool Gophe
 Tool: Gophe
Names Gophe
Category Malware
Type Botnet
Description
(Proofpoint) The Gophe bot then sends messages to all the addresses in the victim’s
Outlook or Thunderbird contact list, then deletes itself upon completion of this email run.
Information
<https://www.proofpoint.com/us/threat-insight/post/dyre-malware-campaigners-innovate-distribution-techniques>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.gophe>
AlienVault OTX <https://otx.alienvault.com/browse/pulses?q=tag:gophe>
Last change to this tool card: 24 April 2021
Download this tool card in JSON format
All groups using tool Gophe
Changed Name Country Observed
APT groups
  Wizard Spider, Gold Blackburn 2014-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8c3f564c-ac5f-43c4-88d9-917153b9f69f
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8c3f564c-ac5f-43c4-88d9-917153b9f69f
Page 1 of 1