Google TAG: Kremlin cyber spies move into malware with a custom backdoor

The threat hunters believe COLDRIVER has used SPICA since at least November 2022

Russian cyberspies linked to the Kremlin's Federal Security Service (FSB) are moving beyond their usual credential phishing antics and have developed a custom backdoor that they started delivering via email as far back as November 2022, according to Google's Threat Analysis Group.…

back backdoor beyond coldriver credential credential phishing cyber email far federal federal security federal security service fsb google google tag hunters kremlin malware moving november phishing russian security service spies tag threat