Skip to content
MalwareWiki

Malware

gokcpdoor

According to LAC, this malware is written in Go and was observed in 2022 used by an unknown China-based APT across several incidents in Japan.

gokcpdoor is a Linux malware family.

Background

LAC reports that this Go-written malware was seen in 2022, employed by an unidentified China-based APT in multiple Japanese intrusions. The backdoor supports 20 commands and reaches its C2 servers using KCP over UDP.

Source: Malpedia (Fraunhofer FKIE).