New Python-Based Payload MechaFlounder Used by Chafer
Unit 42 identified MechaFlounder, a new Python backdoor used by the Chafer group to target a Turkish government entity via HTTP-based C2.
44
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
2 articles · newest firstThe Gopher in the Room: Analysis of GoLang Malware in the Wild
Unit 42 analysis of 10,700 Go-compiled malware samples shows steady growth in the wild, with 92% targeting Windows and top families including Veil, GoBot2, and HERCULES.
45
Appears with
- Seadukemalware · 1
- Turkish government entityvictim · 1
- OilRigthreat actor · 1
- Unit 42vendor · 1
- Palo Alto Networksvendor · 1
- MechaFloundermalware · 1
- Veilmalware · 1
- HERCULESmalware · 1
- ClearSkyorganization · 1
- Unit 42organization · 1
- Comniemalware · 1
- GoBot2malware · 1
- Claysidemalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.