feeds.feedburner.com • 2h
Armored Likho and the BusySnake Stealer Campaign
Armored Likho (also provisionally identified as Eagle Werewolf) is conducting a sophisticated dual-purpose campaign combining cyber espionage with financially motivated theft. The actor targets government agencies and the electric power sector, alongside private individuals, primarily in Russia, Brazil, and Kazakhstan. The technical execution involves spear-phishing and the use of AI-generated loaders to deploy BusySnake Stealer, a novel Python-based malware. By integrating the PolitePaul service into its delivery chain, the group demonstrates an ability to blend high-stakes APT tactics with commodity-style credential theft to maximize impact across both strategic and financial domains.