The cyber espionage group Arcane Werewolf is deploying the upgraded Loki 2.1 malware in targeted attacks against organizations using phishing based delivery methods. The new version improves stealth by executing malicious code in memory, making detection more challenging. It is designed to maximize damage while avoiding detection systems.