Topics Tools Books & Guides Talk to Securafy

Knowledge Hub / IT Operations

IT Operations

Beware of New Go-Based Malware

Beware of New Go-Based Malware

Randy Hall By Randy Hall Updated Jul 2024 4 min read Share

Do you run a business heavily dependent on computers? You're not alone, so beware of new Go-based malware that threatens your cyber security. Keep reading to learn more.

What Is Go-Based Malware?

Go is a programming language, often referred to informally as Golang, that uses advanced, statically typed syntax developed at Google. While similar to the C language, it offers more advanced features such as garbage collection, memory safety, and structural typing.

The language finds its greatest popularity in:

  • Cloud-based and server-side applications
  • Artificial intelligence and data-science
  • Command-line tools
  • Robotics and gaming

Malware is any software used to damage, disrupt, or gain access to a network or a computer. Go-based malware threats include any software that uses the Go language to accomplish its goals.

JaskaGo, the new malware using Go programming, presents significant security concerns with Go-written malicious software. So, if you use a program that requires Go, you must be cautious of Go-language malware attacks. It was first discovered in July of 2023 and masquerades as legitimate installers like CapCut or security tools like AnyConnect.

The Dangers of Go-Based Malware

Why should you beware of new Go-based malware? It can have some devastating effects on your business.

When a user accidentally installs JaskaGo, it first determines whether it's running on a virtual machine; in this case, it harmlessly pings Google or prints a random number. Suppose it's not running on a virtual machine. In that case, it begins stealing private information and gaining permission to do more devastating acts, such as installing other programs on your machine.

One of its most pernicious effects concerns its ability to target Windows, macOS, and Linux using the same codebase. This means the malware developer only needs to write one code for multiple platforms.

Protecting Yourself From Go-Based Malware

If you're concerned about the risks of the latest Go-based malware, you can utilize several methods to protect yourself.

Update Security Procedures

Keep your virus protection current and consider investing in higher-level software or security services. Also, ensure you practice good cybersecurity procedures like enforcing complicated and frequently changed passwords, shutting off computers when not in use, and keeping your operating systems up to date.

Train Employees

Help your employees beware of new Go-based malware by properly training them. Conduct regular training in identifying phishing techniques and suspicious links and teach them to avoid clicking on any download that doesn't have a verifiable source. Training your employees is the best option to prevent malware of all types.

Removing JaskaGo

Suppose you've already experienced a Go-based malware attack. Your IT department can remove the program and repair the damage in that case. It's a complicated process, but most capable departments can complete it using professional malware removal software and identifying compromised files. 

 

Join The Conversation

Have a question or perspective on this topic? Add it below.

Randy Hall

About The Author

Randy Hall · CEO & Founder

Randy Hall is the CEO and Founder of Securafy, with decades of experience helping organizations make smarter, safer decisions about technology.

A frequent speaker and instructor at national IT events, Randy has advised thousands of organizations, from startups and SMBs to large enterprises and U.S. government entities, on secure, practical technology adoption. He writes about the decisions business leaders are often expected to make without enough context, including cybersecurity, compliance, AI, cyber insurance, IT strategy, and business resilience.

Outside the office, you’ll often find Randy on Lake Erie enjoying time on his 38-foot Chris-Craft.

Writes about: Cybersecurity strategy, compliance, AI security, business resilience, cyber insurance, SMB risk, IT leadership

More From This Author →

Get Practical Cybersecurity Field Notes

Monthly cybersecurity, compliance, and IT strategy updates from Securafy, written for business owners who need clear next steps.

  • Practical security tips from our Cyber Security Drip series
  • The Securafy Times, our monthly roundup on compliance and IT strategy
  • Occasional updates on new tools, guides, and research
  • No spam — unsubscribe anytime