Google: Russian FSB Hacking Group Turns to Malware

'Coldriver' Has Been Sending Backdoors Embedded in PDFs Since November 2022
A Russian domestic intelligence agency hacking group known for long-lasting logon credential phishing campaigns against Western targets is now deploying malware embedded into PDFs, say security researchers from Google. "Coldriver" is using a family of backdoors Google dubs Spica.

agency backdoors campaigns coldriver credential credential phishing embedded family fsb google hacking hacking group intelligence intelligence agency logon malware november pdfs phishing phishing campaigns researchers russian russian fsb security security researchers western