China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks

Collection of SecurityWeek stories: China-linked APT 'GopherWhisper' is abusing legitimate services using Go-based backdoors, loaders and injectors in government-focused intrusions. A pre-Stuxnet-era sabotage malware family dubbed 'Fast16' targeted high-precision calculation software and included self-propagation. A US federal agency’s Cisco firewall was found infected with a persistent 'Firestarter' backdoor that survives patching. A Bitwarden NPM package was compromised in a supply-chain attack tied to TeamPCP/Shai-Hulud. CrowdStrike patched a critical LogScale vulnerability and Tenable rem辿