New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations

A new Golang-based backdoor, possibly of Russian origin, uses Telegram for command-and-control communications. The malware, still under development, employs an open-source library for Telegram Bot API interaction, supporting four commands, including executing PowerShell commands and relaunching itself.

*****
Written on