Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
Armored LikhoKaspersky Unveils Armored Likho APT Using BusySnake Stealer Against Russian, Brazilian, and Kazakh Government and Critical Infrastructure
Kaspersky has identified a new APT group, Armored Likho, running a multi-stage spear-phishing campaign that drops a previously undocumented Python infostealer called BusySnake Stealer to steal credentials, browser data, and documents from government and critical infrastructure targets in Russia, Brazil, and Kazakhstan.
Armored Likho Unveils Rust-Based Still Toolkit for Russian Cyber-Espionage
Armored Likho (Eagle Werewolf) deployed a new Rust-based Still Toolkit in May 2026, using a fake donation app to infect Russian victims and collect Telegram data plus audio eavesdropping.
