HeaconLoad Golang Downloader Beacon

Elgonad .@elgonad

•updated Mar 10, 2026•1•0•55

Detects the beaconing activity of the HeaconLoad Golang downloader, a component of the BoryptGrab campaign. This malware sends HTTP POST requests containing system information to the "/healthcheck" endpoint on port 8088.