GoGra
Aliases: Onedrivetools
- Malware type
- backdoor
- Profile updated
- 2026-07-07 15:03:24
Targeted industries: media-and-entertainment
Targeted regions: country_code:bd country_code:in
Context
According to Symantec, a previously unseen backdoor that was deployed against a media organization in South Asia in November, 2023. GoGra is written in Go and uses the Microsoft Graph API to interact with a command-and-control (C&C) server hosted on Microsoft mail services.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Gogra (report)
- security.com — Cloud Espionage Attacks (report)