The FrostyNeighbor threat actor is targeting Ukrainian governmental organizations with spearphishing emails containing malicious PDFs that deliver a JavaScript dropper (PicassoLoader) and ultimately a Cobalt Strike beacon.
PoC
Cobalt Strike +4
FrostyNeighbor
cyberespionage
cobaltstrike
picassoloader
ukraine
2r
3t
2c
3i
updated