GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
Arctic Wolf has disclosed a previously undocumented Go-based malware framework, GoCaracal, used in a June 2026 intrusion at an unnamed communications organization…
Tag: Dark Caracal
Dark Caracal: Latin American Threat Actor
Dark Caracal is a threat actor with a documented history of operating in Latin America. Arctic Wolf linked the GoCaracal malware campaign…
Bandook: Legacy Malware Used Alongside GoCaracal
Bandook is a malware family historically associated with Dark Caracal. In the GoCaracal campaign, Bandook was deployed alongside the lightweight profile of…
Dark Caracal
[Dark Caracal](https://attack.mitre.org/groups/G0070) is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since…
Arctic Wolf: Cybersecurity Company
Arctic Wolf is a cybersecurity company that discovered and analyzed the GoCaracal malware. They published a YARA rule, IoCs, and technical analysis…