Google warns against new malware campaign spreading through PDFs

Google's security researchers warn of a Russian-linked hacking group called Cold River that has evolved its tactics to target victims with data-stealing malware. The group, predominantly targeting Ukraine and its NATO allies, academic institutions, and non-government organisations, has been using PDF documents as lures to deliver malware since November 2022. The malware, known as SPICA, acts as a custom backdoor, providing the attackers with continued access to the victim's machine to execute commands and steal browser cookies and documents.

Google warns against new malware campaign spreading through PDFs
Google's security researchers warn of a Russian-linked hacking group called Cold River that has evolved its tactics to target victims with data-stealing malware. The group, predominantly targeting Ukraine and its NATO allies, academic institutions, and non-government organisations, has been using PDF documents as lures to deliver malware since November 2022. The malware, known as SPICA, acts as a custom backdoor, providing the attackers with continued access to the victim's machine to execute commands and steal browser cookies and documents.