Gofing
Aliases: Velocity Polymorphic Compression Malware
- First seen
- 2022-02-01 00:00:00
- Malware type
- virus
- Last IoC activity
- 2026-07-16 17:56:14
- Profile updated
- 2026-07-07 15:03:21
Context
A file infector written in Go, discovered by Karsten Hahn in February 2022. According to Karsten, despite its internal naming, it is not polymorphic and the virus body is not encrypted. Gofing uses the Coldfire Golang malware development library.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Gofing (report)
- twitter.com — 1498229809675214849 (report)