ZynorRAT technical analysis: Reverse engineering a novel, Turkish Go-based RAT

Sysdig Threat Research Team discovered and reverse-engineered ZynorRAT, a Go-compiled Remote Access Trojan controlled via a Telegram bot. ZynorRAT provides file exfiltration, screenshots, system and process enumeration, persistence via user systemd services, and arbitrary command execution; the report includes multiple Linux and Windows sample hashes, a YARA rule, Telegram C2 artifacts, evidence of active testing, and likely Turkish origin.