The group, which researchers at cybersecurity firm ESET named GopherWhisper, has been active since at least November 2023 and was discovered in January 2025 after investigators found a previously unknown backdoor on the network of a Mongolian government institution.
First seen on therecord.media
Jump to article: therecord.media/china-linked-hackers-target-mongolian-gov-slack-discord
![]()

