APT36 Malware Campaign Targets Indian Government via Windows LNK Files
Article Content
Browse articles 
APT36, also known as Transparent Tribe, has initiated a malware campaign targeting Indian government entities by exploiting Windows LNK shortcut files. The campaign begins with spear-phishing emails containing a ZIP archive titled 'Online JLPT Exam Dec 2025.zip,' aimed at deceiving officials into opening the malicious attachment.
Ask AI about this cluster
Answers cite the sources they use
Updated 217d ago How this analysis works
More articles in this cluster (4)
Following this threat?
Track APT36 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
APT36 Launches Operation RapidRust with New Rust Malware Tools In August 2026, the Pakistan-nexus threat actor APT36 initiated Operation RapidRust, targeting government and defense organizations in India and Afghanistan. The campaign introduced several new Rust-based malware tools, including the RUSTYSHADE backdoor and RUSTYMOVE propagation tool. APT36 also deployed file-stealing… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…