Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts

Cy­ber­se­cu­rity re­sear­chers have dis­clo­sed de­tails of a cyber es­pio­na­ge cam­paign spe­ci­fi­cally tar­ge­ting Linux in­fras­truc­tu­re as­so­cia­ted with go­vern­ment en­ti­ties and state-af­fi­lia­ted in­fras­truc­tu­re. The ac­ti­vity, ob­ser­ved by Palo Alto Net­works Unit 42 bet­ween Oc­to­ber 2025 and April 2026, has been trac­ked under the mo­ni­ker CL-UNK-1211, where "CL" re­fers to clus­ter and "UNK" stands for unk­nown…