Skip to content
Threat Feed
Subscribe

Product

Telegram Desktop

3 briefs RSS
high threat

Armored Likho APT Deploys Rust-Based Still Toolkit for Espionage

The Armored Likho (Eagle Werewolf) threat actor is deploying a new Rust-based cyber-espionage 'Still Toolkit' via a malicious fundraising-themed dropper to exfiltrate Telegram session data and perform covert audio surveillance.

Telegram Desktop Armored Likho cyber-espionage rust malware telegram
1r 3t 2i
high advisory

ClickFix Campaign Activity

Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.

open source packages +47 campaign clickfix
28i updated
high advisory

Apple Security Updates — July 2026

Roundup of Apple security advisories published in July 2026.

PoC macOS LaunchAgents +46 roundup
4c 10i updated