• bunee
• December 7, 2023
• No Comments

The “COOL” in COLDRIVER: A Siberian Update on Cyber Threat

• The threat actor COLDRIVER, identified as having links to Russia, continues to engage in activities related to credential theft.
• COLDRIVER is simultaneously working to improve its tech to elude detection.
• The group is tracked by Microsoft’s Threat Intelligence team under their internal name, Star Blizzard.
• Star Blizzard is also infamously known as Blue Callisto, BlueCharlie, or TAG-53.

The Ongoing Caper of COLDRIVER

This tech-world villain, code-named COLDRIVER, shows no signs of easing off the gas pedal. Still, they continue to dig deep into cyber territories, mining for precious user credentials. With a cold-hearted resolve, this entity seems to have a particular interest in anything considered strategically important to Mother Russia. Now, that’s a tech bear with some serious claws!

A Cambridge Silicon Cyber Cold War, COLDRIVER Evades Detection

Not only does this cold-as-ice threat actor keep going where no bot has gone before, but it’s also upgrading its tech. The COLDRIVER squadron has rolled up their sleeves, developing a better radar-evading game. They say all the world’s a stage, and in this case, COLDRIVER seems to be channeling their inner “James Bond” for a hide-and-seek of global scale!

Star Blizzard, Aka Blue Callisto, Aka BlueCharlie, Aka TAG-53

But fear not, tech whizz pals! Microsoft Threat Intelligence is on the case like Sherlock Holmes at a mystery conference. They’ve got their eagle eye on the COLDRIVER crew, internally referencing them as ‘Star Blizzard.’ But just like a pop star with one too many stage names, this cold fiend is also known under its many aliases including Blue Callisto, BlueCharlie, or TAG-53.

Summary: COLDRIVER, the Multifaceted Threat

In the grand scheme of things, COLDRIVER is like a polar bear in a global game of cyber tag, focusing on pilfering valuable information while becoming more elusive. Courteously, Microsoft’s Threat Intelligence team continues tracking the threat actor, internally known as Star Blizzard. However, their game of thrones doesn’t end there, as they moonlight under various other names like Blue Callisto, BlueCharlie, or TAG-53. Thankfully, Microsoft is more persistent than a dad trying to get his joke across at the dinner table, ensuring this siberian cyber bear doesn’t roam unchecked.

Original Article: https://thehackernews.com/2023/12/microsoft-warns-of-coldrivers-evolving.html