Malware
GoGra
- First Reported
- Apr 22, 2026
- Latest Reported
- Apr 25, 2026
Reported Context (3)
- Harvester has developed a new Linux variant of its GoGra backdoor that abuses the Microsoft Graph API and Outlook mailboxes as a covert C2 channel, using hardcoded Azure AD application credentials to poll mailboxes and Harvester Expands GoGra Backdoor to Linux, Using Outlook for C2
- Harvester has deployed a new Linux variant of its GoGra backdoor that leverages the Microsoft Graph API and Outlook mailboxes as a covert C2 channel. Harvester Expands GoGra Backdoor to Linux, Uses Outlook for C2
- Symantec researchers found a Linux variant of the GoGra backdoor that uses hardcoded Azure AD credentials and the Microsoft Graph API to stealthily pull commands from an Outlook mailbox. Linux GoGra Backdoor Uses Microsoft Graph for Outlook-Based Command and Control
Malware (1)
Threat Actors (1)
MITRE ATT&CK (17)
Vendors (1)
Products (4)
Industries (4)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.