The China-linked APT GopherWhisper has been using legitimate services and various Go-based backdoors in attacks.