
The extended variant of GoCaracal features specialized modules designed for harvesting browser cookies, credential databases, and executing WebRTC-based remote desktop sessions. This sophisticated malware framework represents a significant modernization of the capabilities utilized by Dark Caracal, a hacking collective with established ties to Lebanese intelligence. During a 2026 intrusion into a Venezuelan communications firm, investigators discovered that the group has










