This intelligence report discusses a recent cyber threat targeting Russian companies. The attackers are employing a fork of a popular stealer malware, known as NOVA, to steal data from these organizations. The report highlights the resurgence of an older malware strain that has been modified and repurposed for current attacks. It suggests that cybercriminals are adapting and recycling previously successful tools to carry out new campaigns, emphasizing the importance of ongoing vigilance and updated security measures in the face of evolving threats.