CosmicDuke: Cosmu with a twist of MiniDuke

**CosmicDuke: A hybrid malware combining the MiniDuke loader with Cosmu info-stealer, detailing infection vectors (PDF exploits and decoy documents), persistence and credential/certificate theft, data exfiltration, and multi-group C2 infrastructure with live servers. The report compares loader interop, RC4-based encryption, and timeline of droppers, loaders, and info-stealers, highlighting cross-family code sharing and targeted campaigns against NATO, European governments, and adjacent actors.**