Paper Werewolf
Paper Werewolf is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 14 MITRE ATT&CK techniques and exploits 2 known CVEs.
Also known as
- GOFFEE
- Techniques
- 14
- Exploited CVEs
- 2
- Record updated
About Paper Werewolf.
Hacking group that acquired and weaponized the WinRAR zero-day exploit (CVE-2025-6218) for use in their recent campaigns.
Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.