An inside look at the active Armored Likho APT campaign. The attackers are using spear-phishing, AI-generated loaders, and a new Python-based tool, BusySnake Stealer, to target organizations in Russia, Kazakhstan, and Brazil.
🛡️ VERIFIED CYBER INTELLIGENCE ID: #3666498
⚠️ Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign
⏱️ vor 27d 6h (03.07.2026 um 12:00 Uhr) 📂 ⚠️ Malware / Trojaner / Viren 📡 Feed 🔗 Quelle: securelist.com