Malware
CompactGopher
- First Reported
- Apr 23, 2026
- Latest Reported
- Apr 26, 2026
Reported Context (4)
- and deployed a diverse Go-centric toolset including LaxGopher, RatGopher, BoxOfFriends, JabGopher, CompactGopher, FriendDelivery, and SSLORDoor. ESET Details GopherWhisper Malware Targeting Mongolian Government Entity
- One of the tools that LaxGopher can deploy is CompactGopher, a file collector written in Go that can compress files from the command line and send them to the file.io file-sharing service using a public REST API. ESET Details GopherWhisper APT’s Backdoors in Attacks on Mongolian Government
- The group uses a variety of custom backdoors—LaxGopher, RatGopher, BoxOfFriends, CompactGopher, and SSLORDoor—that abuse mainstream cloud services for C2, indicating prolific but not highly sophisticated development. ESET Finds GopherWhisper Backdoors in Mongolian Government Systems
- The group uses multiple Go-based implants such as LaxGopher, RatGopher, and CompactGopher. ESET Reports About 12 Mongolian Government Systems Infected by GopherWhisper
Malware (6)
People (2)
Threat Actors (6)
MITRE ATT&CK (14)
Vendors (2)
Products (7)
Industries (1)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.