Russian government agencies and industrial entities are the target of an ongoing activity cluster dubbed Awaken Likho.
According to Kaspersky, the attackers have shifted their preference from utilizing the UltraVNC module to obtain remote access to systems to using the agent for the genuine MeshCentral platform. The attackers started a new campaign in June 2024 and it is expected to last at least until August.
The attack mainly targeted Russian government organizations, their contractors, and industrial firms, according to the Russian cybersecurity company.
Awaken Likho, who is also known by the aliases Core Werewolf and PseudoGamaredon, was initially identified by BI.ZONE in June 2023 as part of cyberattacks on the defense and critical infrastructure industries read more about Cyberattack Group ‘Awaken Likho’ Targets Russian Government with Advanced Tools.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions