
For more than a year now, Russian state-sponsored threat actors have been targeting Ukraine’s military and defense organizations with custom-made malware.
This is according to researchers from Google’s Threat Analysis Group (TAG), who dubbed the threat actors COLDRIVER - with other security teams tracking this group’s activity call them Star Blizzard, UNC4057 and Callisto.