New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations

A highly sophisticated, Lua-based malware campaign dubbed “LucidRook” is targeting Taiwanese NGOs and universities with spear-phishing, leveraging modular, stealthy payloads and abused public infrastructure to enable flexible, victim-specific attacks and evade detection.