As cited
Copy frozen at (site build).
threat intel
Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer
Kaspersky has identified a previously unknown threat actor called Armored Likho conducting cyberattacks against government agencies and electric power infrastructure in Russia, Brazil, and Kazakhstan. The group combines financially motivated campaigns against individuals with targeted espionage operations against organizations, using the BusySnake stealer malware.
Why it matters: Government agencies and electric utilities in Russia, Brazil, and Kazakhstan should investigate for signs of compromise; practitioners managing OT environments and critical infrastructure should review logs and network activity for BusySnake indicators of compromise.
- Source published
- First seen by Cybersecurity Tracker