Armored Likho’s Playbook: Why a Credential-Theft Campaign Near Critical Infrastructure Matters

A named threat cluster is being tracked against government and power-sector targets, with modular remote-access malware and infostealers pointing to a campaign built for reuse, not just one-off intrusion.