Armored Likho Hackers Target Governments, Power Grids with BusySnake Malware

A new threat actor, Armored Likho, is attacking government agencies and electric power sectors in Russia, Brazil, and Kazakhstan. The group uses BusySnake stealer malware for both financial theft and cyber espionage, according to Kaspersky. The campaign blends targeted attacks on organizations with financially motivated operations against individuals.