Skip to content
Threat Feed
Subscribe

Product

Webmail (< 1.6.11)

1 brief RSS
high threat

FrostyNeighbor Targets Ukraine with Updated PicassoLoader Chain

The FrostyNeighbor threat actor is targeting Ukrainian governmental organizations with spearphishing emails containing malicious PDFs that deliver a JavaScript dropper (PicassoLoader) and ultimately a Cobalt Strike beacon.

PoC Cobalt Strike +4 FrostyNeighbor cyberespionage cobaltstrike picassoloader ukraine
2r 3t 2c 3i updated