CloudSorcerer APT: A Stealthy Cloud Threat Targeting Russia

CloudSorcerer is a new APT group targeting Russian government organizations. It uses public cloud services and GitHub for stealthy command and control. Their malware gathers sensitive data and leverages legitimate cloud services for exfiltration. While tactics resemble CloudWizard APT, CloudSorcerer’s distinct code suggests a new, potentially inspired group. Their goal is cyberespionage and stealing valuable information.