TI Mindmap HUB
Threat Intelligence Report

GoodPersonRAT: Fake Chinese VPN drops extensive C2 client

📅 July 8, 2026 📰 www.threatlocker.com 🔍 0 CVE(s) referenced

A malicious installer disguised as a legitimate LetsVPN application is targeting users behind China’s Great Firewall, deploying a sophisticated remote access trojan (RAT) that grants attackers full control over compromised systems, evades detection, and enables extensive data theft and surveillance.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle