August 28, 2026
- GoCaracal — a previously undocumented Go framework linked with medium confidence to Dark Caracal — pulls a replacement C2 address from an Ethereum smart contract when its primary infrastructure dies, alongside shell access, browser theft, keylogging and remote desktop (The Hacker News). Second blockchain dead-drop of the day. · Threat Activity
in Australia Charges Two Over the TeamPCP Supply-Chain Spree