Angry Likho APT Strikes Again: Cyber Espionage Group Targets Russia with Sticky Tactics
Angry Likho APT, also known as Sticky Werewolf, is back on the cyber scene, launching spear-phishing attacks primarily in Russia and Belarus. Their latest trick? Sending malicious RAR files that unleash the Lumma stealer, which is as welcome as a wolf at a sheep convention.

Hot Take:
Looks like Angry Likho APT is back at their old tricks again, but this time with a brand-new bag of cyber-espionage tools! They might be called “Sticky Werewolf” by some, but their tactics are more like a game of “Catch Me If You Can.” Someone needs to call Scooby-Doo and the gang to unmask these cyber-criminals!
Key Points:
- Angry Likho APT, a cyber-espionage group, targets organizations in Russia and Belarus.
- The group uses spear-phishing emails with malicious RAR files to deploy Lumma Stealer malware.
- Recent attacks involve Base64-encoded payloads hidden in image files and new command servers.
- The Lumma Stealer collects sensitive data, including cookies, passwords, and cryptocurrency info.
- Angry Likho APT’s tactics are consistent but evolve slightly to evade detection.
Already a member? Log in here