Russia-linked Nodaria group employs Graphiron information stealer

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

A cyber espionage group linked to Russia, known as Nodaria, has been spotted deploying a newly created information-stealing malware named Graphiron in attacks aimed at Ukraine. The malware, coded in Go, has the ability to gather a significant amount of information from compromised computers, including system details, credentials, and files.