Tag: go-language

3 Attack Reports | 0 Vulnerabilities

Attack reports

The Gentlemen ransomware: Dissecting a self-propagating Go encryptor

The Gentlemen is a ransomware-as-a-service operation tracked as Storm-2697, distinguished by combining robust per-file encryption using Curve25519 with XChaCha20 stream cipher alongside aggressive self-propagation capabilities designed for broad network compromise. Emerging in mid-2025 and transiti…
ransomware-as-a-service
go language
kazuar
the gentlemen
2026-05-28
Published: May 28, 2026
Downloadable IOCs: 2

The First AI-Powered Ransomware & How It Works

PromptLock, a proof-of-concept AI-powered ransomware, leverages Lua scripts generated from hard-coded prompts to perform malicious activities across Windows, Linux, and macOS. Written in Go, it communicates with a locally hosted LLM through the Ollama API. The malware scans the filesystem, identifi…
ransomware
cross-platform
proof-of-concept
2025-08-29
promptlock
speck encryption
filesystem scanning
dynamic ransom notes
ai-powered
ollama api
lua scripts
go language
Published: August 29, 2025
Downloadable IOCs: 0

cShell DDoS Bot Attack Case Targeting Linux SSH Server (screen and hping3)

A new DDoS malware strain named cShell is targeting poorly managed Linux servers through SSH services. The threat actor uses brute force attacks to gain initial access, then installs the cShell bot developed in Go language. cShell exploits Linux tools 'screen' and 'hping3' to perform various DDoS a…
linux
ddos
botnet
ssh
brute-force
2024-12-20
carm
hping3
go-language
cshell
screen
Published: December 20, 2024
Downloadable IOCs: 1
Click here to see more Attack Reports