Awaken Likho Adopts New Tactics to Spy on Russian Government

Awaken Likho, an advanced cyber espionage group active since 2021, saw increased activity after the Russo-Ukrainian conflict. Previously using UltraVNC for remote access, they shifted to MeshAgent in June 2024, enhancing their attack capabilities. Targeting government and industrial networks by exploiting legitimate tools like MeshAgent, Awaken Likho presents a growing threat, highlighting the need for vigilance against evolving cyber risks.