As cited
Copy frozen at (site build).
threat intel
Under the SADBRIDGE with GOSAR: QUASAR Gets a Golang Rewrite
Elastic Security Labs documented SADBRIDGE, a loader, and GOSAR, a backdoor written in Golang, deployed together in campaigns against Chinese-speaking targets. The malware pair represents an evolution in tooling for this threat actor.
Why it matters: Organizations with Chinese-speaking users or operations face direct targeting from this loader and backdoor combination; practitioners should review detection signatures and monitor for SADBRIDGE delivery mechanisms.
- Source published
- First seen by Cybersecurity Tracker