Tool
CompactGopher
- First Reported
- Apr 23, 2026
- Latest Reported
- Apr 23, 2026
Reported Context (3)
- a Go-based backdoor called LaxGopher and a suite of tools — including RatGopher, SSLORDoor and CompactGopher — to maintain access and exfiltrate data to File.io, an operation consistent with espionage. ESET Uncovers China-Aligned GopherWhisper Campaign Targeting Mongolian Government
- ESET identified multiple implants and utilities: LaxGopher, RatGopher, BoxOfFriends, SSLORDoor, JabGopher, FriendDelivery, and CompactGopher, plus a file.io exfiltration tool. ESET Links GopherWhisper to China After Uncovering Malware Toolkit
- Supporting tools JabGopher and FriendDelivery load backdoors in memory and CompactGopher exfiltrates files through the file.io sharing service. ESET Details GopherWhisper APT’s Slack, Discord and Outlook C2
Malware (6)
People (1)
Threat Actors (1)
MITRE ATT&CK (8)
Vendors (1)
Products (5)
Tools (4)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.