Fake PDFs and Chat Apps Let Patchwork Spy on PCs and Android Phones

Patchwork, also known as Dropping Elephant, is using fake documents and chat applications to spy on computer and phone users. The long-running espionage group has built separate attack paths for Windows systems and Android devices, allowing it to collect sensitive information from both environments. On Windows, the operation starts with a shortcut file disguised as a PDF document. Opening it launches a hidden PowerShell downloader, displays a decoy file, and quietly installs malware in the background. The technique resembles other malicious shortcut file campaigns that use familiar documents to trick targets into starting an infection. Analysts at Picus Security identified the campaign activity and noted that Patchwork has...

Read the full article at the source.