Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part 1
Threat Actors
Malware Families
Excerpt
IntroductionIn September 2025, Zscaler ThreatLabz identified two campaigns, tracked as Gopher Strike and Sheet Attack, by a threat actor that operates in Pakistan and primarily targets entities in the Indian government. In both campaigns, ThreatLabz identified previously undocumented tools, techniques, and procedures (TTPs). While these campaigns share some similarities with the Pakistan-linked Advanced Persistent Threat (APT) group, APT36, we assess with…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://adobe-acrobat.in | High | Score 58/100 | First seen |
| MD5 | 2e4e4ea817ad2286616f809ca84fc932 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…