ChaChi: a new GoLang Trojan used in attacks against US schools
A new Trojan written in the Go programming language has pivoted from attacks against government agencies to US schools.
The research team from BlackBerry Threat Research and Intelligence said on Wednesday that the malware, dubbed ChaChi, is also being used as a key component in launching ransomware attacks.
ChaChi is written in GoLang (Go), a programming language that is now being widely adopted by threat actors in a shift away from C and C++ due to its versatility and the ease of cross-platform code compilation. According to Intezer, there has been roughly a 2,000% increase in Go-based malware samples over the past few years. "As this is such a new phenomenon, many core tools to the analysis process are still catching up," BlackBerry noted. "This can make Go a more challenging language to analyze."
