Malware
LucidRook
- First Reported
- Apr 9, 2026
- Latest Reported
- Apr 10, 2026
Reported Context (2)
- Cisco Talos researchers tracked a new Lua-based modular backdoor called LucidRook used in October 2025 spear-phishing campaigns against NGOs and universities in Taiwan. Cisco Talos Links LucidRook to Phishing Attacks on Taiwanese NGOs and Universities
- Cisco Talos attributed a previously undocumented threat cluster, UAT-10362, to spear-phishing campaigns targeting Taiwanese NGOs and suspected universities to deploy a new Lua-based stager called LucidRook. UAT-10362 Uses LucidRook Malware in Spear-Phishing Campaigns Targeting Taiwanese NGOs
Malware (2)
People (1)
Threat Actors (1)
MITRE ATT&CK (14)
Products (5)
Tools (1)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.