Malware
Graphon
- First Reported
- Apr 22, 2026
- Latest Reported
- Apr 25, 2026
Reported Context (2)
- One of its tools is a custom backdoor called Graphon, which has similarities with GoGra and also uses Microsoft infrastructure for its C2 activity. Harvester Expands GoGra Backdoor to Linux, Using Outlook for C2
- and information technology sectors in South Asia since June 2021, using a bespoke implant called Graphon that used the Microsoft Graph API for C2. Harvester Expands GoGra Backdoor to Linux, Uses Outlook for C2
Malware (1)
Threat Actors (1)
MITRE ATT&CK (12)
Vendors (1)
Products (3)
Industries (4)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.