Harvester APT Group Unveils New GoGra Linux Backdoor Using Microsoft Graph API

The Harvester APT has developed a Linux GoGra backdoor that uses Microsoft Graph API and Outlook mailboxes for covert C2, disguises ELF binaries as PDFs for initial access, and employs systemd/XDG autostart persistence; initial indicators point to targets in India and Afghanistan and researchers note code overlap with a Windows variant, indicating a coordinated espionage campaign.