GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

August 27, 2026 · 9:33 am 1 sources

Image: The Hacker News

Coverage

More coverage

• GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
  The Hacker News · August 27, 2026 09:33
  Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal, during a June 2026 intrusion at an unnamed communications organization in Venezuela. GoCaracal provides operators with remote shell access and…