Google Code Hosting Website Used To Spread Malware

**Executive summary:** A threat actor abused Google Code project hosting to publish dozens of malicious executables (trojans, backdoors, and keyloggers) over at least a month; the binaries exhibit downloader behavior that retrieves additional malware from the same hosting, have low antivirus detection rates, and are documented with VirusTotal and sandbox analysis and packet captures.