'Sticky Werewolf' APT Stalks Aviation Sector

Sticky Werewolf, an APT active since at least April 2023, is running multi-stage phishing campaigns targeting aviation, defense-related organizations, and other strategic targets in the Russia–Ukraine context; attackers use archived attachments with LNK files to establish persistence, drop AutoIT scripts and batch files that evade security products, and ultimately deploy commercial remote access trojans and stealers for espionage and data exfiltration.