China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors

ESET attributes a previously undocumented China-aligned APT dubbed GopherWhisper to targeted intrusions against Mongolian government entities, deploying a family of Go- and C++-based backdoors and loaders (e.g., LaxGopher, RatGopher, SSLORDoor) that abuse Slack, Discord, Outlook drafts, and file.io for command-and-control and exfiltration; telemetry shows ~12 infected systems and additional victims indicated by attacker-controlled C2 channels.