New Lua-based malware LucidRook observed in targeted attacks against Taiwanese organizations

Reported 08 Apr 2026 by otx · Severity: medium

Cisco Talos observed a spear-phishing attack delivering LucidRook, a newly identified stager that targeted a Taiwanese NGO in October 2025. The metadata in the email suggests that it was delivered via authorized mail infrastructure, which implies potential misuse of legitimate se