Oriental Gudgeon aka. “CoGUI”

Oriental Gudgeon, also known as CoGUI, has undergone a major architectural shift toward a centralized encrypted wrapper model to mask its global phishing operations. This latest iteration employs defensive anti-analysis techniques, such as randomized local storage artifacts and encrypted API routing, while maintaining a heavy focus on US government entities and APAC financial institutions. Read our full technical breakdown to see how this mature framework uses multi-stage workflows, from OTP ver