‘Olympic Destroyer’ resurfaces; targets financial organizations, chemical-threat-prevention labs

Kaspersky Lab researchers observed a resurgence of Olympic Destroyer activity: spear-phishing with tailored decoy documents and payloads appearing to target Russian financial organizations and biochemical/chemical-threat-prevention labs across Europe. Samples show obfuscated scripts, non-binary executable vectors and deliberate false flags (forged Rich Header mimicking Lazarus), suggesting a sophisticated APT-like actor conducting reconnaissance and targeted intrusion attempts.