SHEETCREEP Espionage Campaign Uses UAE-India Lure for RAT Deployment

SHEETCREEP is an espionage campaign that delivers a C# remote access trojan via a diplomatic-themed ISO (UAE-India_Strategic_Partnership_Week.iso) which launches a dropper from a LNK file to install the RAT and present a decoy PDF; the malware uses the Google Sheets API as its command-and-control channel by creating unique tabs per victim, with researchers identifying 91 active victim tabs (including targets in Islamabad) and noting advanced anti-analysis and obfuscation techniques that complicate detection.