New malicious campaigns attributed to DarkHydrus APT group show the adversary’s use of a new variant of the RogueRobin Trojan Trojan. The group’s latest activity was observed against targets in the Middle East, luring them with malicious VBA code (macro) The attacks were first observed by researchers at 360’s Threat Intelligence Center (360 TIC) on January 9. Kaspersky Lab tracks the group as Lazy Meerkat, who is tracked as “sneaky”” and “”creative”””
Source: https://www.bleepingcomputer.com/news/security/darkhydrus-apt-uses-google-drive-to-send-commands-to-roguerobin-trojan/