Cybersecurity researchers have found a malicious Go module that presents itself as a brute-force software for SSH however truly comprises performance to discreetly exfiltrate credentials to its creator.
“On the primary profitable login, the bundle sends the goal IP tackle, username, and password to a hard-coded Telegram bot managed by the risk actor,” Socket researcher Kirill Boychenko
Malicious Go Module Poses as SSH Brute-Drive Software, Steals Credentials by way of Telegram Bot
