GoSerpent Malware Exploits Southeast Asian Government Systems for Cyber Espionage

Cybersecurity firm Kaspersky discovered GoSerpent, a Go-based malware targeting Southeast Asian governments and diplomats since 2025, using encrypted C2 communication and credential dumping tools like Mimikatz. The malware's evolution includes advanced data exfiltration tools and links to threat groups like TetrisPhantom and DoNot Team, highlighting sophisticated espionage operations in the region.

Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in Southeast Asia since late 2025 with a focus on long-term access and intelligence gathering.

Russian cybersecurity company Kaspersky, which uncovered the activity in February 2026, said it was aimed at government and diplomatic entities in

Read original article