Armored Likho APT Targeting Government, Electric Power Entities
Summary
A sophisticated threat actor, dubbed Armored Likho, is actively targeting government and electric power entities. This group employs modular Remote Access Trojans (RATs) and information stealers as part of its financially motivated and cyber espionage campaigns.
IFF Assessment
FOE
The identification of a new APT group (Armored Likho) and its targeting of critical infrastructure and government entities represents a significant threat to defenders.
Defender Context
Defenders should be aware of Armored Likho's tactics, techniques, and procedures (TTPs), particularly their use of modular RATs and information stealers. Monitoring for indicators of compromise associated with this threat actor is crucial, especially for organizations in the government and electric power sectors.