The Russia-associated threat entity referred to as COLDRIVER has been noted for disseminating new malicious software named LOSTKEYS as part of a surveillance-centric initiative employing ClickFix-style social engineering tactics.
“LOSTKEYS can extract files from a predetermined list of extensions and folders, in addition to transmitting system details and active processes to the perpetrator,” the Google Threat