APT / THREAT GROUP
Gopher
1
aliases
Intelligence Profile
Ransomware OS X ransomware (PoC)
Threat Analysis
Gopher is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.
Intelligence Reports Mentioning Gopher
China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks
SecurityWeek· Apr 25, 2026
China-linked hackers targeted Mongolian government using Slack, Discord for covert communications
The Record· Apr 23, 2026
New GopherWhisper APT group abuses Outlook, Slack, Discord for comms
BleepingComputer· Apr 23, 2026
China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
The Hacker News· Apr 23, 2026
GopherWhisper: A burrow full of malware
ESET Research· Apr 23, 2026
Quick Facts
TypeAPT / Threat Group
Aliases1
Also Known As
Gopher
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.