Transparent Tribe APT targets Indian Military

Transparent Tribes (PROJECTM/MYTHIC LEOPARD) is actively deploying a new Crimson RAT variant against military and government targets (notably Indian military) via spear-phishing RAR attachments; the RAT implements persistent Run-key execution, extensive espionage capabilities (file/system management, screenshots, microphone/webcam recording, keystroke logging), a USBworm component for removable-media spread, and hardcoded C2 derivation logic — the report includes the malicious URL, MD5 hashes for the RAR and payload, and a C2 IP (85.136.161.124:8761).