Excerpt
Introduction
During our routine threat monitoring, we uncovered a new phishing campaign tied to a previously unknown APT group that we dubbed Armored Likho (also known as Eagle Werewolf based on circumstantial evidence). This targeted campaign focuses heavily on government agencies and the electric power sector. The geographical footprint of these attacks spans Russia, Brazil, and Kazakhstan, establishing the group as a global threat actor.
Armored Likho blends financially motivated campaigns targeting private individuals with targeted cyber-espionage aimed at organizations. Their toolkit…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Kaspersky on securelist.com.
Mentioned in the excerpt
More from Kaspersky7
- Mirage Kitten targets Middle East and Africa region with new malwareKaspersky · Published 28 Jul
- Kaspersky discovers Keenadu – a multifaceted Android malware that can come preinstalled on new devicesKaspersky · Published 17 Feb
- The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoorKaspersky · Published 29 Dec 2025
- Securelist | Kaspersky’s threat research and reportsKaspersky · Published 16 Apr
On the same topics
- Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukrainebluecyber.hashnode.dev · Published 22 Jul
- Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer…Medium · Published 8 Feb 2024
- Vidar v1.5 in Go: same family, new language, heavy sandbox checksderp.ca · Published 16 May
- StealC Is Back, and This Time It's a RATVaronis · Published 22 Oct
