Dark Caracal Deploys New Go Malware with an Ethereum-Based C2 Fallback

Arctic Wolf Labs assessed with medium confidence that a June 2026 intrusion against a communications organisation in Venezuela was linked to Dark Caracal. The campaign used a previously undocumented Go-based framework called GoCaracal alongside an updated Bandook backdoor.