Threat Intel

Yesterday Félix Aimé posted on X (formerly known as Twitter) a neat YARA rule to detect PDF documents. Tweet by @felixaime These documents relate to the Callisto group, which is attributed to the Russian FSB by various Western intelligence agencies.