· ai-devtools
Palo Alto Networks Unit 42 tracks SysGoRAT targeting government Linux servers Oct 2025-Apr 2026
A specific cyber espionage operation focused on Linux systems belonging to governmental and state-backed organizations has been revealed by cybersecurity investigators.
Palo Alto Networks Unit 42 monitored this activity, which they have designated CL-UNK-1211, noting that "CL" signifies cluster and "UNK" denotes unknown. This surveillance period spanned from October 2025 through April 2026.




