Pakistan-linked hackers target Indian government, universities in new spying campaign

A Pakistan-aligned APT36 (Transparent Tribe) campaign uses spear-phishing ZIPs with a malicious file disguised as a PDF to deploy multi-stage malware 'ReadOnly' and 'WriteOnly' against Indian government, academic and strategic targets; the malware provides persistent remote access, data exfiltration, screenshotting and clipboard monitoring (including potential cryptocurrency hijacking), and demonstrates evolved TTPs such as abuse of trusted Windows components and fileless execution.