CloudSorcerer hackers abuse cloud services to steal Russian govt data

CloudSorcerer is a newly identified APT that uses a custom Windows backdoor and legitimate cloud services for C2 and data exfiltration against Russian government organizations; the malware performs process-specific injection, memory mapping, shellcode injection, and supports extensive remote commands, with IoCs and YARA rules provided by Kaspersky.