Similar to StealthWorker, GoTrim also utilizes a bot network to perform distributed brute-force attacks. The earliest sample that the Fortinet researchers found was from September 2022. That campaign is still ongoing.