Espionage Campaign Targets Government Linux Servers With SysGoRAT Malware
THREAT ACTORPalo Alto Networksredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Palo Alto Networks Unit 42 has disclosed a cyber espionage campaign targeting Linux infrastructure linked to government and state-affiliated entities. The activity, observed between October 2025 and April 2026, is tracked as CL-UNK-1211 and involves the SysGoRAT malware and suspected AI-generated scripts.
For IT people · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Companies