China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks (opens in new tab)

A China-linked APT has been identified that uses multiple Go-basked backdoors. GopherWhisper is a newly identified China‑linked APT group active since at least late 2023, uncovered during an investigation into a Mongolian government compromise. The group uses multiple Go‑based backdoors—such as LaxGopher, RatGopher, and BoxOfFriends—that rely on legitimate services like Slack, Discord, file.io, and Microsoft […] The post China-Linked APT GopherWhisper Abuses Legitimate Services in Government ...