Threat actor
Armored Likho
Tracked by CyberSIXT since Aug 13, 2026 · last activity Aug 19, 2026
Coverage timeline
-
Armored Likho's fake donation apps spy on Russian Telegram userssecurityonline.info · Aug 19, 2026
-
Armored Likho uses Still Toolkit to spy on Telegram in Russiasecurelist.com · Aug 13, 2026