All Detections

GopherWhisper APT C2 Exfiltration via file.io with Go HTTP Client

avatar
Ankit Mehta@Secvyn
updated Jun 30, 2026000

Detects outbound HTTP POST requests to file.io originating from a Go-based HTTP client, consistent with the GopherWhisper APT C2 or exfiltration activity.

Suricata