GoSerpent backdoor attacks in Southeast Asia
Introduction In February 2026 we discovered a set of malicious activities that have been ongoing since late 2025. These activities involved a RAT module written in Go with proxy capabilities,…
-
-
How the ToddyCat APT group gains access to Gmail accounts
Introduction We continue to share details on the malicious techniques and toolsets used by the ToddyCat APT group. In the first part of this report, we examined the group’s attacks…