Armored Likho APT Targeting Government, Electric Power Entities

The threat actor uses modular RATs and information stealers in financially motivated and cyber espionage campaigns. The post Armored Likho APT Targeting Government, Electric Power Entities appeared first on SecurityWeek .

The article reports on Armored Likho, a newly documented APT group conducting cyber-espionage and financially motivated attacks against government agencies and electric power entities, using obfuscated, modular RATs and information stealers engineered to evade dynamic analysis.[2][1] Kaspersky’s analysis highlights spear-phishing, GitHub-hosted payloads, and advanced evasion techniques as part of their toolset.[2][1] From a RealGround perspective, such campaigns illustrate malicious use of increasingly sophisticated tooling and tradecraft that can be augmented by AI for phishing customization, malware obfuscation, and large-scale credential theft, which poses a significant threat to any AI-enabled operational environment. Organizations should test their AI-powered and traditional security controls against similar APT-style tactics via continuous red teaming to validate detection, containment, and response to modular, evasive malware and credential-stealing campaigns.