Skip to content
AttackFeed by Joe Wagner | Cybersecurity News from Across the Internet

AttackFeed by Joe Wagner

Cybersecurity News from Across the Internet

  • Attack/News Feeds
  • Gov Alerts/ISAC Feeds
  • Vulnerability Alerts
  • Privacy/Governance Feeds
  • Fraud Feeds
  • iOS App
  • Android App
  • Home
  • Attack Feeds
  • Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API  – The Hacker News
AttackFeed by Joe Wagner | Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API  - The Hacker News

Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API  – The Hacker News

Posted on April 22, 2026 By [email protected] (The Hacker News) No Comments on Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API  – The Hacker News
Attack Feeds

The threat actor known as Harvester has been attributed to a new Linux version of its GoGra backdoor deployed as part of attacks likely targeting entities in South Asia.
“The malware uses the legitimate Microsoft Graph API and Outlook mailboxes as a covert command-and-control (C2) channel, allowing it to bypass traditional perimeter network defenses,” the Symantec and Carbon Black Threat Hunter  –

Read More  – The Hacker News 

Post navigation

❮ Previous Post: The Supreme Court is about to decide how far geofence warrants can go  – CyberScoop
Next Post: MacOS Native Tools Enable Stealthy Enterprise Attacks – ❯

You may also like

AttackFeed by Joe Wagner | First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials  - The Hacker News
Attack Feeds
First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials  – The Hacker News
February 11, 2026
AttackFeed by Joe Wagner | Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks  - The Hacker News
Attack Feeds
Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks  – The Hacker News
May 1, 2026
AttackFeed by Joe Wagner | Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation  - The Hacker News
Attack Feeds
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation  – The Hacker News
June 2, 2026
AttackFeed by Joe Wagner | CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update  - The Hacker News
Attack Feeds
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update  – The Hacker News
February 18, 2026

Leave a Reply Cancel reply

You must be logged in to post a comment.

  • Attack Feeds
  • Privacy/Governance Feed
  • Gov/ISAC Feeds
  • Alert Feeds
  • Privacy Policy
  • Wagner Cybersecurity

Copyright © 2026 AttackFeed by Joe Wagner.

Theme: Oceanly News Dark by ScriptsTown

We are using cookies for analytics purposes only.  We do not store, track or sell user information.

You can find out more about which cookies we are using or switch them off in .

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

Strictly Necessary Cookies

Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.