Skip to content

CyberSIXT Search

Threat actor · coverage timeline

COLDRIVER

17 articles from 8 outlets between 25 Sep 2025 and 30 Sep. First reported by GBHackers. The busiest day was Wed 30 Sep, with 3 articles.

Articles: 17; all time · from 8 outlets
Days with coverage: 11; of 371 days · all time
Busiest day · all time: 3; articles on Wed 30 Sep
Last 7 days: 0a day; vs 0 a day · previous 7 days
First report: 25 Sep 2025; GBHackers
CVEs named: 0; in these articles

Coverage over time

17 articles · 25 Sep 2025 – 30 Sep

25 Sep 2025First report25 Sep 2025 · GBHackers

Show as table

COLDRIVER: articles per day
Day (UTC)	Articles	Outlets
Thu 25 Sep 2025	1	GBHackers 1
Fri 26 Sep 2025	1	The Hacker News 1
Mon 29 Sep 2025	1	SecurityOnline 1
Mon 20 Oct 2025	1	Dark Reading 1
Tue 21 Oct 2025	2	GBHackers 1, The Hacker News 1
Wed 22 Oct 2025	2	SecurityOnline 1, Security Affairs 1
Sat 28 Mar	1	The Hacker News 1
Mon 30 Mar	2	Security Affairs 1, SecurityWeek 1
Fri 10 Apr	1	SOCRadar 1
Tue 29 Sep	2	Microsoft 1, The Hacker News 1
Wed 30 Sep	3	SecurityWeek 1, Dark Reading 1, SecurityOnline 1

Articles

17 articles

Wed 30 Sep3 articles

18:38
Russian Star Blizzard Expands Phishing Campaign Against Ukraine’s AlliesSecurityOnline
15:38
Russia-Linked Star Blizzard Expands Phishing with Faster RedFlick Malware AttacksDark Reading
11:26
Star Blizzard’s RedFlick Phishing Chain Needs One Click to Deploy MalwareSecurityWeek

Tue 29 Sep2 articles

19:01
Russian Star Blizzard Uses Fake Event Invites to Spy on 100 OrganisationsThe Hacker News
16:35
Star Blizzard Scales Phishing Attacks With One Click Malware DeliveryMicrosoft

Fri 10 Apr1 article

12:31
Phishing kits bypass MFA, target US firms with AiTM at scaleSOCRadar

Mon 30 Mar2 articles

12:13
Russian APT Star Blizzard Adopts DarkSword iOS Exploit KitSecurityWeek
07:56
Russia-linked APT TA446 uses DarkSword exploit to target iPhone users in phishing waveSecurity Affairs

Sat 28 Mar1 article

07:37
TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing CampaignThe Hacker News

Wed 22 Oct 2025 20252 articles

06:40
Russia-linked COLDRIVER speeds up malware evolution after LOSTKEYS exposureSecurity Affairs
01:45
COLDRIVER APT Bounces Back: Deploys ‘ROBOT’ Malware Family Days After LOSTKEYS ExposureSecurityOnline

Tue 21 Oct 2025 20252 articles

07:50
Google Identifies Three New Russian Malware Families Created by COLDRIVER HackersThe Hacker News
05:40
New LOSTKEYS Malware Tied to Russian State-Sponsored Hacker Group COLDRIVERGBHackers

Mon 20 Oct 2025 20251 article

22:00
ColdRiver Drops Fresh Malware on TargetsDark Reading

Mon 29 Sep 2025 20251 article

01:45
Russia-Linked COLDRIVER Group Expands Toolset, Using New Malware in ClickFix Espionage CampaignSecurityOnline

Fri 26 Sep 2025 20251 article

13:20
New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused CyberattacksThe Hacker News

Thu 25 Sep 2025 20251 article

05:55
COLDRIVER APT Group Uses ClickFix to Deliver New PowerShell-Based Backdoor BAITSWITCHGBHackers · first report