Dossier
GopherWhisper
Coverage of GopherWhisper in the Nexus archive.
- China-linked hackers targeted Mongolian government using Slack, Discord for covert communications
China-linked hackers, identified by ESET as GopherWhisper, targeted Mongolian government networks since November 2023. The group used Slack and Discord for covert communications and was discovered in January 2025 after a previously unknown backdoor was found on a government institution's network.
- China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
A previously undocumented China-linked APT group named GopherWhisper has infected 12 Mongolian government systems using Go-based backdoors and loaders. ESET, a Slovakian cybersecurity firm, identified the group's tools and attack methods in a recent report.