Armored Likho: New Keys to Old Doors. How the Group Adapts Its Tools While Keeping Its Signature

Armored Likho is rapidly evolving its malware arsenal—leveraging generative AI, modular RATs, and legitimate cloud infrastructure for stealthy, cross-platform attacks—while shifting to private repositories and advanced anti-analysis techniques to evade detection and complicate attribution.