GoSerpent RAT silently harvests Southeast Asian government secrets since 2025
In February 2026 Kaspersky’s Securelist uncovered a Go‑based backdoor, GoSerpent, used to infiltrate Southeast Asian ministries and diplomatic offices, deploying additional tools to dump credentials and exfiltrate files via network shares. The campaign shows a long‑running, sophisticated espionage effort that now includes a newer Stowaway proxy RAT alongside legacy variants.