New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

Researchers have identified a new malware called GoSerpent that has been used in cyber attacks against targets in Southeast Asia since late 2025. The malware is focused on achieving long-term access and gathering intelligence. The attacks have been targeting government and diplomatic entities in the region. The malware was discovered by Russian cybersecurity company Kaspersky in February 2026. GoSerpent had been previously undocumented before its discovery. The attacks indicate a focus on espionage in Southeast Asia.