New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

Back Thehackernews

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

Thehackernews •[email protected] (The Hacker News) • July 17, 2026

Share: View original

Learn how to secure AI agents with practical controls for access, visibility, secrets, and risk containment.

Learn how to govern risk, secure AI-built software, and keep control as development moves at machine speed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GoSerpent Backdoor Steals Sensitive Data from Southeast Asian Governments A cyber espionage campaign utilizing the GoSerpent backdoor has infiltrated government networks in Southeast Asia for over five years, harvesting sensitive police and biometric data. The operation, revealed by Kaspersky's GReAT, involved the use of a sophisticated remote access Trojan (RAT) that disguised its data exfiltration as legitimate internal traffic. The attackers employed stolen credentials to access and transfer data without raising alarms. The GoSerpent malware, which has evolved since its initial deployment in 2021, now includes advanced encryption methods and additional tools for stealthy data collection. The campaign's persistence and sophistication highlight significant vulnerabilities in governmental cybersecurity measures across the region. The latest variant was actively used in attacks that began in late 2025 and continued into 2026. 5 sources 72

Extracted Entities

Attack Types (1)

Malware (1)