GoBruteforcer: New Golang-Based Malware Breaches Web Servers Via Brute-Force Attacks

A new Golang-based malware dubbed GoBruteforcer has been found targeting web servers running phpMyAdmin, MySQL, FTP, and Postgres to corral the devices into a botnet.
"GoBruteforcer chose a Classless Inter-Domain Routing (CIDR) block for scanning the network during the attack, and it targeted all IP addresses within that CIDR range," Palo Alto Networks Unit 42 researchers said.
"The threat actor

actor addresses alto attack attacks block botnet breaches brute brute-force cidr devices domain ftp gobruteforcer golang ip addresses malware mysql network networks palo palo alto palo alto networks phpmyadmin postgres researchers routing scanning servers targeting threat threat actor unit 42 web