New backdoor targeting Ukrainian entities with possible links to Laundry Bear

Reported 17 Mar 2026 by otx · Severity: medium

A new campaign targeting Ukrainian entities has been identified, attributed to actors linked to Russia. The campaign uses judicial and charity-themed lures to deploy a JavaScript-based backdoor called DRILLAPP, which runs through the Edge browser. This backdoor enables various ac