https://malpedia.caad.fkie.fraunhofer.de/details/win.ghostsocks
GhostSocks (Malware Family)
GhostSocks, a Golang-based proxy malware, was first advertised as a Malware-as-a-Service (MaaS) on Russian-speaking underground forums in October 2023. It uses...
malware familyghostsocks
https://infrawatch.com/blog/ghostsocks-lummas-partner-in-proxy
GhostSocks - Lumma's Partner In Proxy - Codexa – Premium Developer Automation Template
This analysis explores GhostSocks, a Golang-based SOCKS5 proxy malware, detailing its integration with LummaC2 and its command-and-control infrastructure. We...
ghostsockslummapartnerproxy
https://spycloud.com/blog/on-the-hunt-for-ghostsocks/
What to Know: GhostSocks Residential Proxy IoCs
Sep 23, 2025 - SpyCloud Labs uncovers how LummaC2 uses GhostSocks to enable stealthy backconnect proxy access, helping attackers bypass controls and refresh tokens.
residential proxyknowiocs