APT36

From KMS Auto to Scareware: Tracking a Multi-Stage Intrusion Linked to APT36?

The Evolution of APT36’s Crimson RAT: Tracking Variants and Feature Expansion Over the Years

APT Attacks Target Indian Government Using SHEETCREEP, FIREPOWER, and MAILCREEP | Part 2

APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part 1

Operation RapidRust: APT36 Deploys RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH

APT36-Linked HACKERAI Implant Shows Signs of LLM-Assisted Malware Development

Malicious LNK Files and PowerShell Deploy Dual Remote-Access Tools Against Indian Applicants

Operation ShadowRecruit: A Recruitment-Themed Malware Campaign Leveraging ControlR and Google Sheets to Target Indian Job Seekers

FishMonger Uses TCP, UDP, and WebSocket C2 Channels in SprySOCKS Windows Attacks

Operation XENOFISCAL: SideCopy deploying persistent XenoRAT targeting the MoF, Afghanistan