To Be (A Robot) or Not to Be: New Malware Attributed to Russia State-Sponsored COLDRIVER
Google Threat Intelligence describes evolving COLDRIVER tradecraft: NOROBOT loaders set logon scripts that fetch a PowerShell‑based MAYBEROBOT backdoor (aka SIMPLEFIX), offering flexible command execu…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence