The China-linked APT GopherWhisper has been using legitimate services and various Go-based backdoors in attacks.
Fake Antigravity downloads are enabling fast account takeovers using hidden malware and stolen session cookies.