休止千鹤

@malcat4ever I meet this thing yesterday. v2ex.com/t/1151415 The path to the source code in the symbols is in Chinese. I guess it was probably developed by some small team themselves and was using it in their operations....The project name is "TorjanWin2go" (yes, with a typo...)

Does someone know this golang #malware? Golang package name is "torjanPrefix" (yes, with a typo) and it seems to be an infostealer. Sample: bazaar.abuse.ch/sample/52112ae…

嗯，上传一个头像，从今天起，做一个有头有脸的人。 ——一个学渣在一个远离学校的地方留下了一句话