Home > List all groups > List all tools > List all groups using tool GOSSIPFLOW

Threat Group Cards: A Threat Actor Encyclopedia

Names	GOSSIPFLOW
Category	Malware
Type	Tunneling
Description	(BleepingComputer) Go-based malware use on Windows to set up tunneling using the Yamux multiplexer library; it provides SOCKS5 proxy functionality to help exfiltrate data and secure communication with the command and control server.
Information	<https://www.bleepingcomputer.com/news/security/russian-sandworm-hackers-targeted-20-critical-orgs-in-ukraine/>

Last change to this tool card: 23 April 2024

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Sandworm Team, Iron Viking, Voodoo Bear		2009-Mar 2024

1 group listed (1 APT, 0 other, 0 unknown)

APT groups