MITRE ATT&CKsoftware (malware)

S1197 GoBear

Published 2025-01-17 Modified 2025-01-17 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2025-01-17

Description

GoBear is a Go-based backdoor that abuses legitimate, stolen certificates for defense evasion purposes. GoBear is exclusively linked to Kimsuky operations.

Related

Uses · MITRE ATT&CK (3)

  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1553.002 Code Signing sub-technique
  • T1090 Proxy technique

Referenced by MITRE ATT&CK · uses (1)

References