Talos identified a unique malware campaign that was distributed via malicious Word documents. The campaign appeared to be targeting victims in Portugal. The malware was written using the Go programming language. The author of this malware refers to it as “Athena” in their source code working directory. The C2 communications used by the malware made use of Tor2Web proxies, which is part of a trend of increased reliance on these services by various malware authors. In all of the malicious document samples analyzed, the author field within the file metadata was consistent.”]
Source: https://blog.talosintelligence.com/2017/02/athena-go.html