c97acea1a6ef59d58a498f1e1f0e0648d6979c4325de3ee726038df1fc2e831d

SPICA - Rust backdoor delivered as 'Proton-decrypter.exe' in a fake PDF-decryption lure. Google Threat Analysis Group disclosed the sample on 18 January 2024 as the first custom malware they have attributed to COLDRIVER (Star Blizzard / Callisto / SEABORGIUM), assessed as FSB Centre 18.

family

SPICA

first seen

Aug 31, 2023

publisher

Google TAG