Armored Likho Threat Actor Utilizes BusySnake Stealer in Cyber Espionage Campaigns

The threat actor Armored Likho, attributed to cyber attacks on government and power sectors, employs a toolkit featuring the BusySnake Stealer to steal credentials and sensitive data. This campaign demonstrates a shift toward more complex, polymorphically designed malware aimed at bypassing security solutions.

A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan.

"Armored Likho blends financially motivated campaigns targeting private individuals with targeted cyber espionage aimed at organizations," Kaspersky said in a technical analysis published today. "

Read original article