Dark Caracal Expands Cyber Espionage with GoCaracal Malware Framework

Dark Caracal has introduced a new malware framework named GoCaracal consisting of a lightweight initial-access implant and a more capable intelligence-gathering variant that can use an Ethereum blockchain database for backup command-and-control. Discovered by Arctic Wolf in an investigation in Venezuela, the activity is linked to ongoing Spanish-language phishing campaigns targeting military, government, and other organizations across Latin America, suggesting a sophisticated and persistent cyberespionage capability.