ID | Votes | Profile Description |
---|---|---|
Transparent Tribe | 4 | Transparent Tribe is a threat actor known for conducting malicious campaigns against organizations in South Asia. The group has been linked to the ObliqueRAT malware and CrimsonRAT through its infrastructure, which includes the domains vebhost[.]com, zainhosting[.]net/com, and others. The group has |
SideCopy | 3 | SideCopy is a Pakistani threat actor that has been operational since at least 2019, primarily targeting South Asian countries, specifically India and Afghanistan. The Advanced Persistent Threat (APT) group uses lures such as archive files embedded with Lnk, Microsoft Publisher or Trojanized Applicat |
Sidewinder | 3 | Sidewinder is a threat actor group that has been active since at least 2012, with possible origins in South Asia. The group has a history of malicious activities and has been linked to a variety of cyber threats, including the use of the Nim backdoor payload. Sidewinder has targeted entities in mult |
Mythic Leopard | 2 | Mythic Leopard, also known as Transparent Tribe, APT36, and ProjectM, is a threat actor group likely fulfilling strategic intelligence requirements for the Pakistani state. This highly prolific group's activities date back to at least 2013 and primarily involve the creation of fake domains that mimi |
ProjectM | 2 | ProjectM, also known as Transparent Tribe, APT36, Copper Fieldstone, and Mythic Leopard, is a threat actor group originating from Pakistan that has been active since 2013. The group has targeted Indian governmental, military, and research organizations, along with their employees, using a variety of |
ID | Type | Votes | Profile Description |
---|---|---|---|
Crimson | Unspecified | 4 | Crimson is a type of malware that has been used in various cyber-espionage campaigns, notably by ProjectM. The malware was first observed in 2013 and has been continuously employed in attacks alongside other payloads like Capra RAT and Oblique RAT. ProjectM used multiple domains to control the Crims |
Crimson Rat | Unspecified | 3 | Crimson RAT is a malicious software, or malware, primarily used by the threat actor known as APT36 or Transparent Tribe. This custom .NET Remote Access Trojan (RAT) has been observed in multiple instances of cyber-attacks, mainly targeting India and Afghanistan. Over time, alongside Crimson RAT, Tra |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
DARKReading | 3 months ago | Pakistani 'Transparent Tribe' APT Aims for Cross-Platform Impact | |
Securityaffairs | 2 months ago | Security Affairs newsletter Round 479 by Pierluigi Paganini – INTERNATIONAL EDITION | |
BankInfoSecurity | 3 months ago | Pakistan's 'Cosmic Leopard' Is Targeting India With RATs | |
DARKReading | 3 months ago | Pakistani APT 'Celestial Force' Spies on Indian Gov't, Defense Orgs | |
BankInfoSecurity | 4 months ago | Pakistani-Aligned APT36 Targets Indian Defense Organizations | |
ESET | 5 months ago | eXotic Visit campaign: Tracing the footprints of Virtual Invaders | |
CERT-EU | 6 months ago | 12 Months of Fighting Cybercrime & Defending Enterprises | #cybercrime | #infosec | National Cyber Security Consulting | |
CERT-EU | 9 months ago | Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities | |
CERT-EU | 10 months ago | SideCopy’s Multi-platform Onslaught: Leveraging WinRAR Zero-Day and Linux Variant of Ares RAT | |
CERT-EU | 10 months ago | DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan | |
CERT-EU | a year ago | Cyber Security Week in Review: September 22, 2023 | |
CERT-EU | a year ago | Fake YouTube Android Apps Used to Distribute CapraRAT | |
CERT-EU | a year ago | Second highest ransomware profits expected this year | |
CERT-EU | a year ago | Fake YouTube apps leveraged for CapraRAT malware distribution | |
CERT-EU | a year ago | Chinese cyberespionage campaign involves novel Linux backdoor | |
CERT-EU | a year ago | Hackers Using Fake YouTube Apps To Infect Android Devices | |
CERT-EU | a year ago | CapraTube - Transparent Tribe's CapraRAT mimics YouTube to hijack Android phones – Global Security Mag Online | |
DARKReading | a year ago | CapraRAT Impersonates YouTube to Hijack Android Devices | |
CERT-EU | a year ago | CapraTube | Transparent Tribe’s CapraRAT Mimics YouTube to Hijack Android Phones | |
CERT-EU | a year ago | APT36 state hackers infect Android devices using YouTube app clones |