A newly uncovered campaign by Pakistani threat actor APT36, also known as Transparent Tribe, reveals a significant evolution in their cyber-espionage playbook—this time, taking aim squarely at Lin…

Pakistan-aligned APT36 (TAG-140) unleashes DRAT V2, a new Delphi-compiled RAT, in a cyber-espionage campaign targeting Indian government entities via ClickFix social engineering.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

APT36, a Pakistan-linked threat actor, is targeting Indian government officials with phishing campaigns that mimic official websites to harvest credentials and Kavach MFA OTPs in real time.

A new cybersecurity threat is emerging from APT36, a sophisticated state-backed hacking group, as they increasingly target Linux…

A new report reveals that the Pakistan-based APT36 is targeting Indian government entities using spear-phishing and Linux-specific malware to steal sensitive data.

Sekoia exposed TransparentTribe (Pakistan-linked APT) targeting Indian government with AI-assisted DeskRAT malware. The Golang RAT infects BOSS Linux via malicious .desktop files and staging servers.

The Transparent Tribe APT is exploiting Indian government targets by deploying the new DeskRAT malware via phishing to steal data from BOSS Linux systems.

In the ever-evolving theater of cyber conflict, digital borders are being tested daily. Recent intelligence reports have brought to light a…

Transparent Tribe (APT36) evolves with new Linux malware targeting Indian government BOSS systems via weaponized shortcut files.

CYFIRMA unmasks APT36's latest campaign: a fake JLPT exam lure using fileless LNK malware to evade antivirus and spy on Indian government targets.

The hacking group known as Transparent Tribe has launched a new wave of cyber-espionage operations targeting government bodies,

CYFIRMA reveals a new cyber espionage campaign by Transparent Tribe (APT36) targeting Indian defense with stealthy multi-stage malware and decoy PDFs.

Bitdefender research reveals Pakistani group APT36 is using AI-generated vibeware and trusted cloud services like Google Sheets to target Indian officials.

Cyble uncovers "Operation Trust Trap," a 16,800-domain network weaponizing *.gov trust to steal credentials. See how APT36 and others hijack the human eye.

SHEETCREEP malware is a C# Google Sheets RAT tied to APT36. It hides command-and-control inside Google Sheets to evade network detection.

Operation ShadowRecruit targets Indian job seekers with SheetAgent RAT, abusing ControlR and Google Sheets for C2. Seqrite links it to APT36. #OperationShadowRecruit #APT36 #SheetAgent #Malware #I…

Security specialists at Acronis uncovered an active cyberespionage campaign targeting telecommunications companies in Afghanistan. Furthermore, the attackers focus heavily on government agencies a…

At a glance Actor/Group APT36 / Transparent Tribe (moderate confidence) Activity Type Cyber espionage; custom backdoor delivery via fake installers Targets Afghan telecom providers; Indian governm…

At a Glance Attribute Details Actor or Group APT36 (also known as Transparent Tribe) Activity Type Cyber espionage, data exfiltration, lateral movement Targets or Victims Government and defense or…