S0158PHOREAL

[PHOREAL](https://attack.mitre.org/software/S0158) is a signature backdoor used by [APT32](https://attack.mitre.org/groups/G0050). (Citation: FireEye APT32 May 2017) Documented platforms: Windows. Attributed to ATT&CK group: APT32. Catalogued in ATT&CK 14.1. 2 references curated. Documented platforms: Windows. Attributed to ATT&CK group: APT32. Catalogued in ATT&CK 14.1. 2 references curated.