Tag
high
threat
Armored Likho APT Leverages BusySnake Stealer with AI-Generated Loaders and Phishing
2 rules 10 TTPsThe Armored Likho APT group is conducting a spear-phishing campaign against government and energy sectors in Russia, Kazakhstan, and Brazil, using AI-generated loaders and the Python-based BusySnake Stealer to exfiltrate credentials and sensitive data.
Armored Likho
apt
infostealer
phishing
python
windows
government
energy
2r
10t
critical
advisory
Lotus Data Wiper Targeting Venezuelan Energy and Utility Firms
3 rules 1 TTPThe Lotus wiper, a previously undocumented data-wiping malware, was deployed against Venezuelan energy and utilities organizations in 2025, overwriting physical drives, deleting files, and rendering systems unrecoverable.
data-wiper
lotus-wiper
venezuela
energy
utilities
3r
1t