Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts

Summary

Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government entities and state-affiliated infrastructure. The activity, observed by Palo Alto Networks Unit 42 between October 2025 and April 2026, has been tracked under the moniker CL-UNK-1211, where "CL" refers to cluster and "UNK" stands for unknown

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.