GoldenJackal

Reports: 10
Last reported: 6 April 2026
Known CVEs: 10

ID: goldenjackal
Sources: MISP ETDA Malpedia
Merge evidence: 2 alias matches

Reports per quarter

2021 Q3: 1 report
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: 3 reports
2023 Q3: 1 report
2023 Q4: no reports
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: 2 reports
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 3 reports

Dated reports, 2021 Q3 to 2026 Q2.

Techniques seen in the last two years

T1005 1 report
T1016.001 1 report
T1018 1 report
T1025 1 report
T1027.013 1 report
T1036.005 1 report
T1036.008 1 report
T1041 1 report
T1046 1 report
T1048.002 1 report

Show all 50 techniques Show fewer

T1052.001 1 report
T1053.005 1 report
T1057 1 report
T1059.001 1 report
T1059.003 1 report
T1059.006 1 report
T1070.004 1 report
T1071.001 1 report
T1074.001 1 report
T1082 1 report
T1083 1 report
T1087.001 1 report
T1090.001 1 report
T1091 1 report
T1092 1 report
T1106 1 report
T1112 1 report
T1114.001 1 report
T1119 1 report
T1120 1 report
T1132.001 1 report
T1135 1 report
T1204.002 1 report
T1210 1 report
T1518 1 report
T1543.003 1 report
T1547.001 1 report
T1552.001 1 report
T1552.004 1 report
T1560.002 1 report
T1564.001 1 report
T1567.002 1 report
T1569.002 1 report
T1572 1 report
T1583.003 1 report
T1583.004 1 report
T1584.006 1 report
T1585.003 1 report
T1587.001 1 report
T1588.002 1 report

Counts come from technique IDs in the actor's report text.

CVEs named in reports

CVE-2017-0199 KEV ransomware
CVE-2017-3506 KEV
CVE-2020-0986 KEV
CVE-2020-1380 KEV
CVE-2021-1732 KEV ransomware
CVE-2021-22893 KEV ransomware
CVE-2021-28310 KEV
CVE-2021-31955 KEV
CVE-2021-31956 KEV
CVE-2023-28252 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

6 April 2026

Duqu

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Duqu
6 April 2026

Mind the (air) gap: GoldenJackal gooses government guardrails

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Mind the (air) gap: GoldenJackal gooses government guardrails
6 April 2026

APT trends report Q2 2021

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor APT trends report Q2 2021
4 October 2024

it didn't turn into a truck, but a widely spread Android botnet

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor it didn't turn into a truck, but a widely spread Android botnet
4 October 2024

Virus Bulletin :: TA577 walked just past you: indirect syscalls in Pikabot

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Virus Bulletin :: TA577 walked just past you: indirect syscalls in Pikabot
30 August 2023

IT threat evolution in Q2 2023

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor IT threat evolution in Q2 2023
14 June 2023

Picus Cyber Threat Intelligence Report May 2023: Top 10 MITRE ATT&CK Techniques

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Picus Cyber Threat Intelligence Report May 2023: Top 10 MITRE ATT&CK Techniques
23 May 2023

Meet the GoldenJackal APT group. Don’t expect any howls

Malpedia library date Kaspersky fromORKLCCS '25 data

Archived copy on ORKL Detailsfor Meet the GoldenJackal APT group. Don’t expect any howls
23 May 2023

Meet the GoldenJackal APT group. Don’t expect any howls

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Meet the GoldenJackal APT group. Don’t expect any howls
11 September 2021

APT_trends_report_Q2_2021_Securelist

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor APT_trends_report_Q2_2021_Securelist

Newest first. Details opens the report in Explore.