APT36 Malware Campaign Targeting Windows LNK Files to Attack Indian Government Entities

Cybersecuritynews •Tushar Subhra Dutta • December 31, 2025

APT36, also known as Transparent Tribe, has launched a new malware campaign that targets Indian government and strategic entities by abusing Windows LNK shortcut files. The attack starts with spear‑phishing emails that carry a ZIP archive named “Online JLPT Exam Dec 2025.zip,” using an exam notice theme to lure officials into opening the attachment. Once […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

APT36 Malware Campaign Targets Indian Government via Windows LNK Files APT36, also known as Transparent Tribe, has initiated a malware campaign targeting Indian government entities by exploiting Windows LNK shortcut files. The campaign begins with spear-phishing emails containing a ZIP archive titled 'Online JLPT Exam Dec 2025.zip,' aimed at deceiving officials into opening the malicious attachment. 4 sources 52

Extracted Entities

APT36 Malware Campaign Targeting Windows LNK Files to Attack Indian Government Entities

The full story

Extracted Entities

APT Groups (2)

Attack Types (2)

Industries (1)

MITRE ATT&CK (1)

Platforms (1)