GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
Arctic Wolf has disclosed a previously undocumented Go-based malware framework, GoCaracal, used in a June 2026 intrusion at an unnamed communications organization…
Tag: Arctic Wolf
GoCaracal: New Go-Based Malware Framework
GoCaracal is a previously undocumented Go-based malware framework used in a June 2026 intrusion. It provides remote shell access, payload execution, and…
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is targeting Microsoft 365 accounts using device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, AI-assisted…
CISA Warns Fortinet Customers as FortiBleed Campaign Compromises 86,644 FortiGate Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to Fortinet customers following the discovery of a widespread…
Arctic Wolf: Cybersecurity Company
Arctic Wolf is a cybersecurity company that discovered and analyzed the GoCaracal malware. They published a YARA rule, IoCs, and technical analysis…
FortiBleed: 110 Million Credentials Harvested via FortiGate Firewalls in Global Campaign
A Russian-speaking initial access broker (IAB) has been linked to a large-scale credential-harvesting operation dubbed FortiBleed, targeting over 430,000 FortiGate firewalls globally…