RomCom Malware Resurfaces With SnipBot Variant

RomCom, the malware which targeted Ukraine’s military and supporters, has returned with a new upgraded variant known as SnipBot. Once introduced through a fake PDF document, SnipBot allows hackers to execute commands and download additional files onto a victim’s system. While previous versions of RomCom often used ransomware, the new version focuses solely on gathering intelligence. The updated malware has been spreading since December 2021, according to researchers at Palo Alto’s Unit 42.