The FrostyNeighbor threat actor is targeting Ukrainian governmental organizations with spearphishing emails containing malicious PDFs that deliver a JavaScript dropper (PicassoLoader) and ultimately a Cobalt Strike beacon.
PoC
Cobalt Strike +8
FrostyNeighbor
cyberespionage
cobaltstrike
picassoloader
ukraine
2r
3t
5c
16i
updated