Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

A threat actor called Armored Likho has been linked to cyber attacks on government agencies and the power sector in several countries, including Russia, Brazil, and Kazakhstan. Armored Likho's activities involve both financially motivated campaigns targeting individuals and targeted cyber espionage aimed at organizations. The group's attacks have been found to utilize the BusySnake stealer. Kaspersky has published a technical analysis of Armored Likho's operations, shedding light on the threat actor's tactics. The attacks demonstrate a blend of financial and espionage motivations. Armored Likho's targets span multiple sectors and geographic regions.