Armored Likho is a apt_group tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed July 3, 2026; most recent activity July 4, 2026.
A newly identified APT group, Armored Likho, is conducting a phishing campaign targeting government agencies and electric power sectors in Russia, Brazil, and Kazakhstan. The group employs a sophisticated infostealer…