MEDIUMApt
Global

Armored Likho expands its cyber-espionage toolkit

·Source: Securelist (Kaspersky)

Updated:

Executive Summary

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Analysis

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.
Source Attribution

Originally published by Securelist (Kaspersky) on Aug 13, 2026.

Related Threats

MEDIUMApt

Russia Targeting Ukraine Using Internet-Connected Cameras

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/russia-targeting-ukraine-using-internet-connected-cameras-image_small-7-a-32566.jpg" align=right hspace=4><b>Attacks Against Ukrainian Soldiers and Materiel Tied to Hacking of European Devices</b><br>Hacked websites and internet-connected devices in Europe are serving as cyberespionage launchpads for Russia's ongoing war against U

Bank Info Security
MEDIUMApt

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Securelist (Kaspersky)
CRITICALApt

How CSOs can turn cybersecurity into a business growth strategy

For years, cybersecurity leaders have worked to convince organizations that security deserves a seat at the executive table. Today, that conversation is changing. The challenge is no longer proving that cybersecurity matters; it is demonstrating how security leaders can help organizations innovate, modernize, and grow with confidence. As organizations accelerate digital transformation, CSOs have a

CSO Online