Update: The two zgRAT IOCs that are less than 6 months old were reported as false positives on ThreatFox. The first one has now been re-classified as PureRAT, while the second one is marked as (Unknown malware)[https://threatfox.abuse.ch/ioc/1750083/] The reason for the Unknown tag is probably because there is not yet a #PureMiner tag on Malpedia.