Globalscape Malicious

This report details how legitimate GlobalSCAPE binaries are utilized by Advanced Persistent Threats (APT) and cybercriminal groups to evade detection, specifically highlighting the 2023 MOVEit/GoAnywhere attacks affecting the parent company (Fortra), and the abuse of legitimate GlobalSCAPE executables to bypass Application Whitelisting.

Reference: Internal KB article “Globalscape False Positive Guide.” globalscape malicious