LucidRook Malware Targets Taiwan Institutions Via UAT-10362

Cyber Threat Intelligence is flagging new activity from the LucidRook malware, a Lua-based threat observed in phishing campaigns. According to their reporting, LucidRook has been actively targeting non-governmental organizations (NGOs) and universities within Taiwan, with recent attacks being linked to a specific threat identifier, UAT-10362.

This campaign highlights the ongoing focus on Taiwanese institutions by threat actors leveraging sophisticated, albeit sometimes custom, tooling. The use of Lua, a lightweight scripting language, can make this malware more adaptable and potentially harder to detect by signature-based security solutions. The phishing vector suggests a focus on initial access through social engineering, aiming to compromise user credentials or deploy further malicious payloads.