Threat Actor

Armored Likho

Properties

summary
Armored Likho, a previously undocumented threat actor, was attributed to cyberattacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan using the BusySnake stealer.
first_seen
2026-07-06T04:00:29.739771+00:00
last_seen
2026-07-06T04:00:29.739771+00:00
created_at
2026-07-06T04:00:29.739771+00:00
mention_count
1
evidence_url
https://thehackernews.com/2026/07/armored-likho-targets-government.html
target
government agencies, electric power sector in Russia, Brazil, and Kazakhstan
provenance
news-scan
suspected_origin
unknown
scan_confidence
0.8
status
pending

Explore this actor's full graph with Ninja Signal

Armored Likho — Threat Actor Profile — Ninja Signal | Ninja Signal