'Batavia' Windows Spyware Campaign Targets Dozens of Russian Orgs

'Batavia' Windows spyware campaign targets dozens of Russian orgs

A previously undocumented spyware called 'Batavia' has been targeting large industrial enterprises in Russia in a phishing email campaign that uses contract-related lures.

New spyware strain steals data from Russian industrial companies

Moscow-based cybersecurity firm Kaspersky said the campaign has already affected over 100 victims across several dozen Russian organizations, but did not disclose the specific targets.

Researchers Uncover Batavia Windows Spyware Stealing Documents From Russian Firms - Data Intelligence

Jul 08, 2025Ravie LakshmananCyber Espionage / Threat Intelligence Russian organizations have been targeted as part of an ongoing campaign that delivers a previously undocumented Windows spyware called Batavia. The activity, per cybersecurity vendor Kaspersky, has been active since July 2024. “The targeted attack begins with bait emails containing malicious links, sent under the pretext of signing a contract,” the Russian company said. “The ma…

Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms

文章描述了两起网络间谍活动：俄罗斯组织遭 Batavia 间谍软件攻击，通过伪装合同的钓鱼邮件传播；另一起 NordDragonScan 恶意软件活动则利用 RAR 文件中的 LNK 文件传播。两者均窃取文档、系统信息及浏览器数据。

New Batavia Spyware Targets Russian Industrial Enterprises - Cybernoz - Cybersecurity News

New Batavia spyware targets Russian industrial enterprises Pierluigi Paganini July 07, 2025 Since March 2025, fake contract emails have been spreading Batavia spyware in targeted attacks on Russian organizations. Since March 2025, a targeted phishing campaign against Russian organizations has used fake contract-themed emails to spread the Batavia spyware, a new malware designed to steal internal documents. The attack, ongoing sin…

Batavia Spyware Targets Employees via Weaponized Word Documents Delivering Malware Payloads

Batavia, an unidentified spyware, has been using a sophisticated phishing operation to target Russian industrial organizations since July 2024. Kaspersky researchers have identified a sharp rise in detections since early March 2025, with over 100 users across dozens of organizations falling prey to bait emails disguised as contract agreements. These emails, often containing file names […] The post Batavia Spyware Targets Employees via Weaponized…