Spyware Campaign Hits Russian Industrial Firms

Phishing Emails Disguise Malware as Contract Files Prajeet Nair (@prajeetspeaks) • July 9, 2025

A Russian cybersecurity company is warning that hackers are targeting Russia's industrial sector using a previously undocumented spyware, reeling them in with contract-themed emails lures.

See Also: Beyond Replication & Versioning: Securing S3 Data in the Face of Advanced Ransomware Attacks

Kaspersky dubbed the spyware "Batavia", tracing the origins of the campaign to July 2024. The campaign has compromised more than 100 users at dozens of Russian organizations. The attackers use emails disguised as official contract offers to trick employees into downloading spyware that steals sensitive documents and system data.

The Moscow-headquartered company doesn't attribute the campaign to a threat actor. (see: Looking Tough: Russia Trumpets Pro-Ukraine Hacker Arrests).

The infection begins when victims click a link embedded in a ...