COLDRIVER, a Russia-backed APT group, has evolved their tactics by creating custom malware called “Spica” and using encrypted PDFs to target victims, marking a significant shift from their previous focus on phishing emails for credential harvesting.
View full story…