Skip to content
Threat Feed
Subscribe

Actor

Armored Likho

2 briefs RSS
high threat

Armored Likho APT Deploys Rust-Based Still Toolkit for Espionage

The Armored Likho (Eagle Werewolf) threat actor is deploying a new Rust-based cyber-espionage 'Still Toolkit' via a malicious fundraising-themed dropper to exfiltrate Telegram session data and perform covert audio surveillance.

Telegram Desktop Armored Likho cyber-espionage rust malware telegram
1r 3t 2i
high threat

Armored Likho APT Leverages BusySnake Stealer with AI-Generated Loaders and Phishing

The Armored Likho APT group is conducting a spear-phishing campaign against government and energy sectors in Russia, Kazakhstan, and Brazil, using AI-generated loaders and the Python-based BusySnake Stealer to exfiltrate credentials and sensitive data.

Armored Likho apt infostealer phishing python windows government energy
2r 10t