A Golang implementation of Cobalt Strike called Geacon is likely to garner the attention of threat actors looking to target Apple macOS systems.
The findings come from SentinelOne, which observed an uptick in the number of Geacon payloads appearing on VirusTotal in recent months.
“While some of these are likely red-team operations, others bear the characteristics of genuine malicious attacks,”
Source: Google Hacker News