Ukraine says hackers abuse SyncThing tool to steal data

"Upon launching the file, it extracts a PDF ("Wowchok.pdf"), an installer ("sync.exe"), and a BAT script ("run_user.bat"). The BAT executes sync.exe, which contains SyncThing and SPECTR malware, along with the required libraries".

abuse bat cybersecurity data file hackers installer libraries malware pdf script spectr malware steal sync syncthing tool ukraine