Transparent Tribe Targets Indian Government, Defense, and Aerospace Sectors Leveraging Cross-Platform Programming Languages
ID: ba770a22-c355-5d10-8d17-b72ea1e96028
STIX ID: report--ba770a22-c355-5d10-8d17-b72ea1e96028
Feed Name: Arctic Wolf Blog
Threat Score
Arctic Wolf Labs documents an active Transparent Tribe (APT36) espionage campaign (late 2023–Apr 2024) targeting Indian government, defense and aerospace sectors using spear-phishing, malicious ISOs/ZIPs and cross-platform stealers (Python, Golang, Rust), C2 via Telegram/Discord/Google Drive and extensive infrastructure and IOCs; the report includes technical analysis, MITRE mapping, numerous sample hashes/domains/IPs, and defensive detections (YARA) and assesses the activity as ongoing and likely Pakistan-aligned.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.