Threat actorRussiaTracked since 2026-07

Cold River

Also known as:COLDRIVER

As of 2026-07-19, Cold River is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as COLDRIVER.

Tracked threats: 11 high
First seen: 2026-072026-07-19
Last seen: 2026-072026-07-19
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: RussiaNation or origin

Nation: Russia · 1 tracked threat(s) · Categories: MALWARE

Activity timeline

Cold River appears in 1 tracked threat between 2026-07-19 and 2026-07-19.

Tracked threats

COLDRIVER (UNC4057/Star Blizzard) Re-Tools with NOROBOT/BAITSWITCH/YESROBOT/MAYBEROBOT/SIMPLEFIX Malware Chain After LOSTKEYS DisclosureHIGH2026-07-19