Skip to content
MalwareWiki

Malware

GoGra

aka Onedrivetools

According to Symantec, a previously unseen backdoor that was deployed against a media organization in South Asia in November, 2023.

GoGra, also known as Onedrivetools, is a Windows malware family.

Background

Symantec reports this as a previously undocumented backdoor used against a South Asian media organization in November 2023. Written in Go, GoGra leverages the Microsoft Graph API to communicate with a command-and-control (C&C) server hosted on Microsoft mail services.

Source: Malpedia (Fraunhofer FKIE).