{"id":391524,"date":"2025-05-08T04:17:49","date_gmt":"2025-05-07T22:47:49","guid":{"rendered":"https:\/\/dripp.zone\/news\/google-uncovers-lostkeys-malware-linked-to-russian-backed-cold-river-hackers-crypto-news\/"},"modified":"2025-05-08T06:02:28","modified_gmt":"2025-05-08T00:32:28","slug":"google-uncovers-lostkeys-malware-linked-to-russian-backed-cold-river-hackers-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/google-uncovers-lostkeys-malware-linked-to-russian-backed-cold-river-hackers-crypto-news\/","title":{"rendered":"Google uncovers \u2018LOSTKEYS\u2019 malware linked to Russian-backed Cold River hackers – Crypto News"},"content":{"rendered":"

<\/p>\n

\n

Google has uncovered a new strain of malware, dubbed “LOSTKEYS”, believed to be the work of Cold River, a Russian-aligned hacking group reportedly connected to the country\u2019s Federal Security Service (FSB), reported Reuters.<\/p>\n<\/div>\n

\n

According to a blog post published on Wednesday by Google\u2019s Threat Intelligence Group (GTIG), the newly identified malware represents a significant advancement in Cold River\u2019s cyber capabilities. <\/a>LOSTKEYS is designed to steal files and transmit system data back to its operators, expanding the group\u2019s known toolkit for espionage.<\/p>\n<\/div>\n

\n

Wesley Shields, a researcher at GTIG, stated that the malware signals \u201ca new development in the toolset\u201d used by the group, which has a history of targeting sensitive political and strategic entities.<\/p>\n<\/div>\n

\n

All about the Cold River group<\/h2>\n

Cold River, also known under various aliases, has been linked to previous cyber operations aimed at high-profile Western individuals and institutions. The group\u2019s primary mission, experts say, is the collection of intelligence that furthers Russian geopolitical interests.<\/p>\n<\/div>\n

\n

Recent surveillance by Google\u2019s researchers<\/a> shows that, between January and April 2025, Cold River targeted advisers\u2014both current and former\u2014to Western governments and military institutions. Other victims reportedly included journalists, international think tanks, non-governmental organisations, and individuals associated with Ukraine.<\/p>\n<\/div>\n

\n

The Russian embassy<\/a> in Washington has yet to respond to requests for comment on the allegations.<\/p>\n<\/div>\n

\n

Cold River has previously drawn attention for its audacious operations. In mid-2022, the group was accused of targeting three nuclear research facilities in the United States. Later that year, it was implicated in the leaking of private emails belonging to former British intelligence chief Sir Richard Dearlove, alongside other individuals associated with pro-Brexit activities.<\/p>\n<\/div>\n

\n

Cybersecurity analysts warn that the emergence of LOSTKEYS<\/a> underscores a broader escalation in cyber espionage tactics being employed by state-linked actors. Google has urged targeted organisations and individuals to remain vigilant and adopt updated security measures to mitigate potential risks.<\/p>\n<\/div>\n

\n

(With inputs from Reuters)<\/i><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Google has uncovered a new strain of malware, dubbed “LOSTKEYS”, believed to be the work of Cold River, a Russian-aligned hacking group reportedly connected to the country\u2019s Federal Security Service (FSB), reported Reuters. According to a blog post published on Wednesday by Google\u2019s Threat Intelligence Group (GTIG), the newly identified malware represents a significant advancement […]<\/p>\n","protected":false},"author":2,"featured_media":391529,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[188,183,35394,35402,185,186,4737,1044,35396,73,35403,35398,4736,35399,35393,35395,3288,187,184,35397,1757,189,35401,35400,150,182,190],"class_list":["post-391524","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-blockchain-tech","tag-blockchain-technology","tag-cold-river","tag-cold-river-group","tag-crypto-technology","tag-cryptocurrency-technology","tag-cyber-espionage","tag-cybersecurity","tag-data-theft","tag-google","tag-google-cybersecurity-alert","tag-google-threat-report","tag-hacking","tag-kremlin-linked-hackers","tag-lostkeys","tag-lostkeys-malware","tag-malware-attack","tag-metaverse-technology","tag-nft-technology","tag-russian-cyberattack","tag-russian-hackers","tag-soul-bound-token","tag-state-sponsored-hacking","tag-system-information-theft","tag-tech","tag-technology","tag-token-technology"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/391524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=391524"}],"version-history":[{"count":1,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/391524\/revisions"}],"predecessor-version":[{"id":391531,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/391524\/revisions\/391531"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/391529"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=391524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=391524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=391524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}