BLUERABBIT Backdoor Targets Windows Systems With File Encryption

A new Golang-based backdoor known as BLUERABBIT is actively targeting Windows systems with a devastating mix of data exfiltration, file encryption, and disk-wiping capabilities. First observed in mid-to-late March 2026 and suspected to be targeting entities in Israel, this malware is linked to an Iran-nexus threat actor. According to the Google Threat Intelligence Group (GTIG), this activity cluster is the same one responsible for the BLUEWIPE and SEWERGOO malware observed in…