APT-C

Cybersecuritynews •Tushar Subhra Dutta • December 16, 2025

A significant discovery in threat intelligence reveals that APT-C-35, commonly known as DoNot, continues to maintain an active infrastructure footprint across the internet. Security researchers have identified new infrastructure clusters linked to this India-based threat group, which has long been recognized as a state- actor with espionage capabilities targeting critical regions in South Asia. APT-C-35 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

APT-C-35 (DoNot) Maintains Active Infrastructure in South Asia APT-C-35, known as DoNot, is an India-based threat group recognized for its espionage capabilities. Recent findings indicate that this group continues to operate an active infrastructure footprint across the internet, with new clusters identified by security researchers. The group's activities primarily target critical regions in South Asia. 2 sources 35

Extracted Entities

APT Groups (2)

Apt-c-35 DoNot