* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Friday, May 9, 2025
Earth-News
  • Home
  • Business
  • Entertainment

    Zugalu Entertainment Welcomes Crimson Herring Studios to Its Family!

    Fall 2025 TV Schedule: Your Guide to the Complete Lineup – Wyoming News Now

    Get Ready for Fall 2025: Your Ultimate Guide to the Exciting TV Lineup!

    Blackstone River Theatre presents music from Scotland with Cantrip – The Valley Breeze

    Experience the Enchanting Sounds of Scotland: Cantrip Takes the Stage at Blackstone River Theatre!

    The viral wireless audio dongle for in-flight entertainment just got a big upgrade – and I love it – ZDNET

    Game-Changer for In-Flight Entertainment: The Upgraded Wireless Audio Dongle You’ll Love!

    Tahoe City Downtown Association opens 4th of July Entertainment Grant Program – Sierra Sun

    Celebrate Independence Day: Tahoe City Launches Exciting 4th of July Entertainment Grant Program!

    WEBTOON Entertainment Revolutionizes Webcomic Discovery with Innovative New Personalization Features and Product Updates – Business Wire

    Unlocking a New Era of Webcomic Discovery: WEBTOON’s Exciting Personalization Features and Updates!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Newmont signs deal to use Chrysos Corporation technology – Capital Brief

    Newmont Partners with Chrysos Corporation to Revolutionize Mining Technology

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Technology is the key to empathy in insurance – InsuranceNewsNet

    Unlocking Empathy: How Technology is Transforming the Insurance Experience

    Technology – Inflexion

    Revolutionizing the Future: The Impact of Cutting-Edge Technology

    Outdated technology and stress-related absences contribute to Newark Airport chaos – Travel Weekly

    How Outdated Technology and Stress Are Fueling Chaos at Newark Airport

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment

    Zugalu Entertainment Welcomes Crimson Herring Studios to Its Family!

    Fall 2025 TV Schedule: Your Guide to the Complete Lineup – Wyoming News Now

    Get Ready for Fall 2025: Your Ultimate Guide to the Exciting TV Lineup!

    Blackstone River Theatre presents music from Scotland with Cantrip – The Valley Breeze

    Experience the Enchanting Sounds of Scotland: Cantrip Takes the Stage at Blackstone River Theatre!

    The viral wireless audio dongle for in-flight entertainment just got a big upgrade – and I love it – ZDNET

    Game-Changer for In-Flight Entertainment: The Upgraded Wireless Audio Dongle You’ll Love!

    Tahoe City Downtown Association opens 4th of July Entertainment Grant Program – Sierra Sun

    Celebrate Independence Day: Tahoe City Launches Exciting 4th of July Entertainment Grant Program!

    WEBTOON Entertainment Revolutionizes Webcomic Discovery with Innovative New Personalization Features and Product Updates – Business Wire

    Unlocking a New Era of Webcomic Discovery: WEBTOON’s Exciting Personalization Features and Updates!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Newmont signs deal to use Chrysos Corporation technology – Capital Brief

    Newmont Partners with Chrysos Corporation to Revolutionize Mining Technology

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Technology is the key to empathy in insurance – InsuranceNewsNet

    Unlocking Empathy: How Technology is Transforming the Insurance Experience

    Technology – Inflexion

    Revolutionizing the Future: The Impact of Cutting-Edge Technology

    Outdated technology and stress-related absences contribute to Newark Airport chaos – Travel Weekly

    How Outdated Technology and Stress Are Fueling Chaos at Newark Airport

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Business

Russian threat group spreading backdoor through phishing, says Google

January 18, 2024
in Business
Russian threat group spreading backdoor through phishing, says Google
Share on FacebookShare on Twitter

A Russian-based espionage group known for stealing login credentials of government and military officials is also trying to trick victims into downloading malware.

Google’s Threat Analysis Group (TAG) says the attackers, known to researchers as ColdRiver, UNC4057, Star Blizzard or Callisto, has added to its arsenal by adding poisoned PDF attachments in phishing messages that lead to the installation of a backdoor.

It’s a warning to ColdRiver’s usual targets, which include high profile individuals in non-governmental organizations like think tanks, universities, former intelligence and military officers, NATO governments, and Ukraine.

ColdRiver often creates an online persona pretending to be an expert in a particular field or somehow affiliated with the target, Google says. The impersonation account is then used to establish a rapport with the target, increasing the likelihood of the phishing campaign’s success. Eventually the gang sends a phishing link or document containing a link.

“As far back as November 2022, TAG has observed ColdRiver sending targets benign PDF documents from impersonation accounts,” TAG said in a report today. “ColdRiver presents these documents as a new op-ed or other type of article that the impersonation account is looking to publish, asking for feedback from the target. When the user opens the benign PDF, the text appears encrypted. If the target responds that they cannot read the encrypted document, the ColdRiver impersonation account responds with a link, usually hosted on a cloud storage site, to a ‘decryption’ utility for the target to use. This decryption utility, while also displaying a decoy document, is in fact a backdoor, tracked as SPICA, giving ColdRiver access to the victim’s machine.”

SPICA was detected as early as last September, but Google believes it was used almost a year before that. It’s the first custom malware that Google attributes as having been developed and used by ColdRiver.

Written in Rust, this backdoor uses JSON over websockets for command and control. It steals cookies from browsers, allows the uploading and downloading of files, and lists contents of file systems.

The backdoor establishes persistence via an obfuscated PowerShell command which creates a scheduled task named CalendarChecker.

Google’s report includes the latest indicators of compromise.

Last week, the Reuters news agency reported that ColdRiver targeted three nuclear research laboratories in the United States in 2023: the Brookhaven (BNL), Argonne (ANL) and Lawrence Livermore National Laboratories (LLNL), according to internet records. They showed the hackers creating fake login pages for each institution and emailing nuclear scientists in a bid to make them reveal their passwords, Reuters said.

Microsoft has been among the cybersecurity companies trying to disrupt this attacker, which it calls Star Blizzard. In December it reported that the group was trying to improve its detection evasion capabilities.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : ITBusiness.ca – https://www.itbusiness.ca/news/russian-threat-group-spreading-backdoor-through-phishing-says-google/127079

Tags: businessRussianthreat
Previous Post

Hashtag Trending Jan.18

Next Post

Should the CIO be solely responsible for keeping AI in check? Info-Tech weighs in

Ecological and anthropogenic effects on the genomic diversity of lemurs in Madagascar – Nature

Unraveling the Impact of Nature and Humanity on Lemur Genomic Diversity in Madagascar

May 9, 2025
Scientists edge closer to solving mystery of T. rex origins – Live Science

Scientists edge closer to solving mystery of T. rex origins – Live Science

May 9, 2025
Dispatches from the Wild: An ode to science – Explore Big Sky

Adventures in Nature: Celebrating the Wonders of Science

May 9, 2025
Lifestyle brand is giving away an original Rolls-Royce Silver Spur for free, but there’s an $85,000 catch – supercarblondie.com

Win a Classic Rolls-Royce Silver Spur for Free—But There’s an $85,000 Twist!

May 9, 2025
Four Flyers Set to Play in the 2025 IIHF World Championship – NHL.com

Four Flyers Set to Play in the 2025 IIHF World Championship – NHL.com

May 9, 2025
Trump Tariffs: Xi Fortifies China’s Economy Before First Talks on Trade With US – Bloomberg

Xi Strengthens China’s Economy Ahead of Crucial Trade Talks with Trump

May 9, 2025

Zugalu Entertainment Welcomes Crimson Herring Studios to Its Family!

May 9, 2025
The emerging Trumpification of mental and behavioral health – Axios

The emerging Trumpification of mental and behavioral health – Axios

May 9, 2025
When the pope and politics collide: From the Politics Desk – NBC News

Divine Dilemmas: The Intriguing Intersection of Papacy and Politics

May 9, 2025
Newmont signs deal to use Chrysos Corporation technology – Capital Brief

Newmont Partners with Chrysos Corporation to Revolutionize Mining Technology

May 9, 2025

Categories

Archives

May 2025
MTWTFSS
 1234
567891011
12131415161718
19202122232425
262728293031 
« Apr    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (594)
  • Economy (605)
  • Entertainment (21,518)
  • General (15,210)
  • Health (9,647)
  • Lifestyle (610)
  • News (22,149)
  • People (608)
  • Politics (612)
  • Science (15,827)
  • Sports (21,115)
  • Technology (15,595)
  • World (595)

Recent News

Ecological and anthropogenic effects on the genomic diversity of lemurs in Madagascar – Nature

Unraveling the Impact of Nature and Humanity on Lemur Genomic Diversity in Madagascar

May 9, 2025
Scientists edge closer to solving mystery of T. rex origins – Live Science

Scientists edge closer to solving mystery of T. rex origins – Live Science

May 9, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version