PHOREAL

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[PHOREAL](https://attack.mitre.org/software/S0158) is a signature backdoor used by [APT32](https://attack.mitre.org/groups/G0050). (Citation: FireEye APT32 May 2017)

Associated Techniques (3)

ID	ATT&CK	Tactics
T1059.003	Windows Command Shell	-
T1095	Non-Application Layer Protocol	-
T1112	Modify Registry	-

Used by Actors (1)

APT32
Nation-state

Metadata

ID:	669
Created:	13/01/2026 17:48
Updated:	07/03/2026 16:00