Headlines
Google identifies new malware linked to Russia-based hacking group
Published by Global Banking & Finance Review®
Posted on May 7, 2025
2 min readLast updated: January 24, 2026
Global Banking & Finance Review®
Company
Published by Global Banking & Finance Review®
Posted on May 7, 2025
2 min readLast updated: January 24, 2026
Google has detected 'LOSTKEYS', a new malware by Cold River, linked to Russia, targeting NATO and NGOs for intelligence collection.
(Reuters) -Alphabet's Google said on Wednesday it has identified new malware called "LOSTKEYS" tied to the Russian-based hacking group Cold River, which is capable of stealing files and sending system information to attackers.
The malware "marks a new development in the toolset" of Cold River, Wesley Shields, a researcher with Google Threat Intelligence Group, said in a blog.
Cold River, a name used to track hacking campaigns previously linked to Russia's Federal Security Service, is primarily known for stealing login credentials for high-profile targets, including those within NATO governments, non-governmental organizations and former intelligence and diplomatic officers, Shields said in the blog. The central goal was intelligence collection in support of Russian strategic interests.
Recent targets, observed in January, March and April 2025, include current and former advisers to Western governments and militaries, as well as journalists, think tanks and NGOs, and unnamed individuals connected to Ukraine, according to the blog.
The Russian embassy in Washington did not immediately respond to a request for comment.
Past high-profile campaigns have included targeting three nuclear research laboratories in the U.S. in the summer of 2022, and the publishing of the private emails of former British spymaster Richard Dearlove, alongside pro-Brexit individuals, in an operation revealed in May 2022.
(Reporting by Deborah Sophia in Bengaluru and AJ Vicens in Detroit; Editing by Arun Koyyur and Emelia Sithole-Matarise)
The article discusses Google's discovery of new malware 'LOSTKEYS' linked to the Russian hacking group Cold River.
Cold River is known for stealing login credentials and targeting high-profile entities like NATO and NGOs.
Recent targets include advisers to Western governments, journalists, think tanks, and individuals connected to Ukraine.
Explore more articles in the Headlines category
