TAG-140 Targets Indian Government Via 'ClickFix-Style' Lure
ID: 508cb83a-4b7e-53c9-baa5-bcb6ee6d222a
STIX ID: report--508cb83a-4b7e-53c9-baa5-bcb6ee6d222a
Feed Name: Dark Reading
Threat Score
Recorded Future's Insikt Group observed TAG-140 (linked to SideCopy/Transparent Tribe) using a new Delphi-compiled DRAT V2 RAT in targeted spear-phishing campaigns against Indian government and related sectors; the campaign uses mshta-based delivery with the BroaderAspect.NET loader and enables persistence, reconnaissance, exfiltration, and remote control, prompting recommendations to monitor spearphishing infrastructure, loader reuse, and behavioral indicators.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.