Russian organizations have been targeted as part of an ongoing campaign that delivers a previously undocumented Windows spyware called Batavia.
The activity, per cybersecurity vendor Kaspersky, has been active since July 2024.
« The targeted attack begins with bait emails containing malicious links, sent under the pretext of signing a contract, » the Russian company said. « The main goal of the