CiberLATAMbywhalemate

#SysGoRAT

This tag brings together coverage of a remote-access malware family tied to persistence and data theft, with attention to its behavior, techniques, and potential impact on corporate environments. It also includes analysis of infection paths, indicators of compromise, and detection and response guidance relevant to organizations across Latin America.

CSIRT warns of CL-UNK-1211 on Linux servers

Asobancaria said CL-UNK-1211 is hitting government Linux servers and state-linked infrastructure with SysGoRAT and reverse shells.

Oct 23, 2026 · 2 min