'BusySnake' Infostealer Slithers into Critical Infrastructure Networks

Summary

A threat group identified as 'Armored Likho' has successfully infiltrated critical infrastructure networks, including government agencies and electrical power entities. The attacks have been observed targeting organizations in Russia, Brazil, and Kazakhstan, indicating a broad geographical scope. The group is employing an infostealer known as 'BusySnake' to compromise these sensitive systems.

Indicators of Compromise

• malware — BusySnake

Entities