Threats Tagged 'still toolkit'
View all threats tagged with 'still toolkit'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'still toolkit'
Click on any threat for detailed analysis and mitigation recommendations
New Armored Likho tools target Telegram and eavesdropping 0 The Armored Likho group launched a cyber-espionage campaign in May 2026 targeting private individuals and organizations in Russia, including corporations, public sector, IT companies, and educational institutions. The attackers used fake donation service applications to initiate infections. They deployed the Still Toolkit, a Rust-based malware suite with two components: Still Sync, which steals Telegram session data to extract chat logs, media, and account info via the Telegram API; and Still Audio, which conducts covert audio surveillance by analyzing audio streams, detecting speech, recording conversations, and sending data to command-and-control servers. This campaign shows advanced capabilities and reuse of infrastructure and encryption methods from prior operations. Join the discussion | AlienVault OTX General | 08/13/2026, 11:13:16 UTC Added: 08/13/2026, 13:26:13 UTC |
Showing 1 to 1 of 1 result