Indian Government, Oil Companies Breached by 'HackBrowserData'

EclecticIQ researchers uncovered "Operation FlightNight," an espionage campaign targeting Indian government IT, defense and communications bodies and energy companies using a modified open-source information stealer ("HackBrowersData") delivered by a phishing email masquerading as an Indian Air Force invitation. The stealer harvested login credentials, cookies, browser history, PII and financial/drilling documents; the actor then uploaded about 8.81 GB of exfiltrated data to Slack channels named "FlightNight," prompting sharing of findings with Indian authorities.