RUSSIAN THREAT GROUP COLDRIVER EXPANDS ITS TARGETING OF WESTERN OFFICIALS TO INCLUDE THE USE OF MALWARE

Summary from the TLDR InfoSec newsletter

Google's Threat Analysis Group discusses the COLDRIVER Threat group from Russia and its increasing attacks on western officials using malware. The group primarily focuses on credential phishing against high-profile individuals in NGOs, former intelligence and military officers, and NATO governments. It employs impersonation accounts to establish rapport with targets and increase the success of its phishing campaigns.