BadPaw and MeowMeow: Russian Cyber Offensive Targets Ukraine with Novel Malware Duo

ClearSky reports a targeted Russian state-aligned campaign against Ukraine that uses phishing ZIPs containing HTA files and steganography (hidden data in CAT.png) to deploy BadPaw (a .NET loader) which fetches the MeowMeow backdoor from C2 virtualdailyplanner.pro; both components employ functional decoys and anti-analysis checks, and Russian-language strings in the code support attribution.