Deciphering LilacSquid’s Strategies for Long-Term Data Theft

Summary:

The data theft operation conducted by LilacSquid, a recently identified threat actor, closely mimics the tactics of North Korean APT groups and has been active since at least 2021. LilacSquid targets IT enterprises in the United States, energy industries throughout Europe, and pharmaceutical firms across Asia.

Threat Level – Red | Attack Report