NewsPublished 9 Jun 2026

GoPhish is safe?

Source Reddit Cybersecurity

Discussion

This report discusses concerns about the safety of using GoPhish, a phishing framework, due to a Cisco Talos blog noting that threat actors abuse GoPhish to deliver malware such as PowerRAT and DCRAT. The information is sourced from a Reddit cybersecurity post linking to the Talos blog. There is no direct vulnerability in GoPhish itself described here, but rather its abuse as a delivery mechanism by attackers. No affected versions or patches are specified.

r/cybersecurity (opens in a new tab)u/lenon860 points0 comments

I want to use gophish, but i see this Cisco Talos note Threat actor abuses Gophish to deliver new PowerRAT and DCRAT, and I don´t know if it´s safe to use in real scenario

Impact

The impact is indirect: GoPhish can be used by attackers as a platform to deliver malware payloads, potentially leading to compromise of targeted systems if users fall victim to phishing campaigns. There is no indication that GoPhish software contains a security flaw that would be exploited to compromise the software or its operators. The risk lies in the malicious use of the tool by threat actors.

Defensive guidance

Users should be aware that GoPhish can be abused by attackers to deliver malware and should implement appropriate phishing detection and user awareness measures. Evaluate the trustworthiness of phishing campaigns and monitor for malicious activity.

Summary

The provided information highlights that threat actors have been observed abusing the GoPhish phishing framework to deliver malware families PowerRAT and DCRAT, as reported by Cisco Talos. This is not a vulnerability in GoPhish software itself but an indication that attackers use GoPhish campaigns as a vector for malware distribution. The Reddit post expresses user concern about the safety of using GoPhish in real scenarios based on this abuse. No technical details about vulnerabilities or exploits in GoPhish are provided.

References

Community reviews

Loading reviews…

Discussion

AI analysisMachine-generated, updated 9 Jun 2026, 20:40 UTC

Technical details

References

Community reviews