ExCobalt Cyber Gang Targets Russian Sectors with New GoRed Backdoor

Russian organizations have come under attack from a cybercrime gang named ExCobalt. This group is using a new type of backdoor software called GoRed, written in Golang. Researchers Vladislav Lunin and Alexander Badayev from Positive Technologies have revealed that ExCobalt's focus is on cyber espionage. The group has been active since at least 2016 and is believed to have connections with the infamous Cobalt Gang, which attacked banks to steal money. In 2022, ExCobalt began using Cobalt's signature tool, CobInt.