New Lua-based malware LucidRook observed in targeted attacks against Taiwanese organizations
released on 2026-04-08 @ 01:48:47 PM
Cisco Talos observed a spear-phishing attack delivering LucidRook, a newly identified stager that targeted a Taiwanese NGO in October 2025. The metadata in the email suggests that it was delivered via authorized mail infrastructure, which implies potential misuse of legitimate sending capabilities.