New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

### Executive Summary Security researchers identified Zergeca, a Golang-based botnet family that conducts ACK flood DDoS attacks and provides modular capabilities (persistence, proxying, scanning, self-upgrade, file transfer, reverse shell, and sensitive data collection). The malware uses DoH for C2 resolution, the Smux library for communications, string obfuscation and packer modifications for evasion, and has been observed active against targets in Canada, Germany, and the U.S.; investigators link a reused C2 IP (84.54.51.82) to prior Mirai activity.