ZeroHour
Threat actor

Armored Likho

0 mentions in 7 days · 0 in 30 days · 1 total · first seen · last

Timeline

Armored Likho expands its cyber-espionage toolkit

Kaspersky reports the Armored Likho espionage group now delivers its new Still Toolkit via fundraising-themed lures to steal Telegram data and eavesdrop on victims.

Kaspersky researchers describe a new campaign by the Armored Likho espionage actor. The campaign masquerades as fundraising efforts and delivers a newly developed Still Toolkit designed to steal Telegram data and eavesdrop on victims. The update expands the group's toolkit and continues its espionage-focused targeting.

Kaspersky Securelist · Aug 13, 2026Threat actor in the wild

Appears with

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.