securelist.com· Jul 16, 2026· by Noushin Shabab

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Two-phase attacks with the GoSerpent backdoor, Stowaway RAT, ThumbcacheService and other tools aim to steal data from government entities in Southeast Asia.

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#GReAT research#Malware descriptions#Malware Technologies#Malware Descriptions#Malware#Backdoor#Encryption#Credentials theft

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

More Writeups Like This

MacSync under the microscope: new delivery methods and a new payload

Angry Birds: Toy Ghouls’ new toys

ValleyRAT masquerading as adware

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia