Google TAG warns that Russian COLDRIVER APT is using a custom backdoor

Google warns that the Russia-linked threat actor COLDRIVER expands its targeting and is developing a custom malware. The ColdRiver APT (aka “Seaborgium“, “Callisto”, “Star Blizzard”, “TA446”) is a Russian cyberespionage group that has been targeting government officials, military personnel, journalists and think tanks since at least 2015. In the past, the group’s activity involved persistent phishing […]

actor apt backdoor blizzard callisto coldriver cyberespionage cyber warfare google google tag government hacking information security news it information security journalists malware military military personnel officials personnel pierluigi paganini russia russian seaborgium security star star blizzard ta446 tag targeting think tanks threat threat actor