Transparent Tribe Uses AI to Mass-Produce Malware Implants in Campaign Targeting India

Bitdefender attributes a campaign to Pakistan-aligned APT36 that uses AI-assisted development to generate numerous disposable implants written in niche languages (Nim, Zig, Crystal, Rust, Go) and leverages trusted cloud services (Slack, Discord, Supabase, Google Sheets, Firebase) to evade detection; infection begins via LNK/ZIP/ISO or malicious PDFs, leads to in-memory PowerShell execution and deployment of backdoors, loaders, infostealers and commodity tooling like Cobalt Strike/Havoc to achieve persistence and data exfiltration.