| By Lauren LaPorta | Russian advanced persistent threat ColdRiver has expanded and evolved its phishing campaigns against Western officials and allies of Ukraine through the deployment of a new custom backdoor, Spica. Google’s Threat Analysis Group continues to protect user safety through Safe Browsing blocklists and user safety alerts.