APT36 Uses Malicious Windows Shortcuts to Target Indian Government

Transparent Tribe APT36: Weaponized Shortcuts and Adaptive Persistence Target Indian Government Entities

Can a weaponized shortcut file that looks like an exam document steal government secrets? Yes—and Transparent Tribe (APT36) is doing exactly that. A fresh campaign targeting Indian governmental and academic entities uses…

Pakistan-linked hackers target Indian government, universities in new spying campaign

The campaign has been attributed to APT36, also known as Transparent Tribe, a long-running threat actor accused of spying on Indian government bodies, military-linked organizations and universities.

APT36 Uses Malicious Windows Shortcuts to Target Indian Government

A suspected nation-state group launched a cyber-espionage campaign targeting Indian government entities using malicious Windows shortcut files.  The campaign uses “… deceptive delivery techniques, including a weaponized Windows shortcut (LNK) file masquerading as a legitimate PDF document and embedded with full PDF content to evade user suspicion,” said Cyfirma researchers. APT36 Behind the LNK Espionage Campaign The campaign is attributed to AP…

Transparent Tribe Launches New RAT Attacks Against Indian Government And Academia - Cybernoz - Cybersecurity News

The threat actor known as Transparent Tribe has been attributed to a fresh set of attacks targeting Indian governmental, academic, and strategic entities with a remote access trojan (RAT) that grants them persistent control over compromised hosts. “The campaign employs deceptive delivery techniques, including a weaponized Windows shortcut (LNK) file masquerading as a legitimate PDF document and embedded with full PDF content to evade user suspic…

Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia

The threat actor known as Transparent Tribe has been attributed to a fresh set of attacks targeting Indian governmental, academic, and strategic entities with a remote access trojan (RAT) that grants them persistent control over compromised hosts. "The campaign employs deceptive delivery techniques, including a weaponized Windows shortcut (LNK) file masquerading as a legitimate PDF document