The Patchwork APT group (likely Indian) has launched a new cyber-espionage campaign against Turkey's defense sector, using conference lures and DLL sideloading to steal secrets on unmanned platforms and hypersonic weapons.

Patchwork APT has launched a new campaign in South Asia, exploiting DLL sideloading and obfuscation to deliver malware that masquerades as VLC media player for deep espionage.

Patchwork APT deployed StreamSpy, a new trojan that uses WebSocket for covert C2 and HTTP for file transfer, blending malicious activity with web traffic to evade detection during espionage operations.

The hacking group known as Patchwork—also referred to as Dropping Elephant and Maha Grass—has once again come under