GoldenJackal is a cyber espionage threat actor active since at least August 2019, primarily targeting government and diplomatic entities across Europe, the Middle East, and South Asia. The group's principal motivation is the theft of confidential and highly sensitive information, particularly from air-gapped systems. GoldenJackal distinguishes itself through its unique and persistent focus on compromising these isolated networks, having developed and deployed two distinct, sophisticated toolsets over five years specifically for this purpose. The group is assessed with moderate confidence to have Russian connections, based on analysis of C&C protocols used in its malware, which exhibit similarities to those associated with Russian-speaking groups like Turla and MoustachedBouncer. While initially employing a .NET-based toolset, GoldenJackal has evolved to utilize a more modular, Go-based framework in its recent operations.

Aliases del actor

APT GOLDENJACKALJackalControlJackalWorm o GoldenJackalreflejando su enfoque en ataques persistentescibernéticos

Actores similares

apt-goldenjackalactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1