BOATBEAM
- Malware type
- backdoor
- Family
- Malware family
- Operating systems
- windows
- Languages
- go
- Profile updated
- 2026-09-08 06:52:31
Targeted industries: financial-services retail-and-hospitality
Targeted regions: country_code:br
Context
BOATBEAM is a Go backdoor used by BREEZE COMET (also tracked as PLUMP SPIDER) against Brazilian financial organisations, and the last layer of a deliberately redundant access architecture. It stands up a bogus IIS HTTPS service on port 443 so its traffic passes for an ordinary web server, and only switches on its command and control behaviour when a specific session cookie arrives.
Used by threat actors
- BREEZE COMET (threat-actor)