Spring harvest - Leek Likho group's campaign to hunt for documents

Reported 18 May 2026 by otx · Severity: medium

The Leek Likho group (also known as SkyCloak or Vortex Werewolf) was first described by researchers in 2025, when a series of targeted attacks on public sector organizations in Russia and Belarus became known. This campaign was called Operation SkyCloak. We observed the continuat