El Salvador (Country): news timeline & CVEs

Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus

A California judge dismissed El Faro journalists' U.S. lawsuit against NSO Group over Pegasus infections.

A California federal judge dismissed a lawsuit by Salvadoran journalists at El Faro whose phones were infected with NSO Group's Pegasus spyware, finding the court lacked jurisdiction. The Knight First Amendment Institute said Pegasus was used against lead plaintiff Carlos Dada and colleagues at least 226 times between June 2020 and November 2021, often before major investigations published. Plaintiffs had asked the court to order NSO to delete collected data and identify the client behind the surveillance. Another judge dismissed the case in March 2024 as entirely foreign; the institute plans to appeal Wednesday's ruling.

The Record20:30 UTC · 3h agoPolicy & legal in the wild

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Arctic Wolf links new Go-based GoCaracal malware with Ethereum smart-contract C2 fallback to Dark Caracal, targeting a Venezuelan communications organization.

Arctic Wolf assessed with medium confidence that a June 2026 intrusion at an unnamed Venezuelan communications organization used GoCaracal, a previously undocumented Go-based malware framework linked to Dark Caracal. The lightweight profile provides encrypted C2, interactive shell access, and shellcode injection; the extended profile adds browser data theft, keylogging, WebRTC remote desktop, and SOCKS5 proxying. When the primary C2 server is unreachable, the malware queries an Ethereum smart contract via eth_getStorageAt at public JSON-RPC endpoints to fetch a replacement C2 address. Bandook was deployed in parallel, and Arctic Wolf published a YARA rule and indicators of compromise.

The Hacker NewsAug 27, 09:34 UTC · Aug 27, 2026Malware in the wild1

El Salvador

Timeline2 articles

Appears with

Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address