The Gophish phishing framework is being utilized by threat actors in phishing campaigns to deliver Remote Access Trojans (RATs). This framework provides attackers with a platform to easily create and launch convincing phishing emails that lure unsuspecting victims into providing credentials or clicking malicious links. The RATs are often disguised as legitimate applications or files, and once installed on the victim’s device, they grant the attacker remote access to the compromised system, enabling them to steal data, install malware, or carry out other malicious activities.