Google warns against new malware campaign spreading via PDFs

Google’s security researchers warn of a Russian-linked hacking group called Cold River that has evolved its tactics to target victims with data-stealing malware. The group, predominantly targeting Ukraine and its NATO allies, academic institutions, and non-government organisations, has been using PDF documents as lures to deliver malware since November 2022. The malware, known as SPICA, acts as a custom backdoor, providing the attackers with continued access to the victim’s machine to execute commands and steal browser cookies and documents.