Threat Actor Profiles

GopherWhisper

1 briefing · first covered 4/26/2026 · last covered 4/26/2026

Indicators of Compromise

Subscribe to unlock this actor's full IOC list

Free subscribers unlock full IOC lists, Sigma detection rules, remediation steps, and every daily briefing.

Attribution & Known Techniques

Matched to GopherWhisper in MISP's open threat-intelligence galaxy.

Country: China

No technique-level data in the matched source for this actor.

Coverage Timeline

Not yet tracked for this actor

  • CrowdStrike Falcon / SentinelOne Deep Visibility-specific query syntax — hunting queries above (if any) are Microsoft Defender/Sentinel KQL
  • File transfer and exfiltration services used
  • Hunting queries — no FalconFriday rule matched this actor's known techniques