APT36 Malware Campaign Targets Indian Government via Windows LNK Files
First seen 31 Dec 2025, 14:24 UTC
•

•95% similarity
•52
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
APT36, also known as Transparent Tribe, has initiated a malware campaign targeting Indian government entities by exploiting Windows LNK shortcut files. The campaign begins with spear-phishing emails containing a ZIP archive titled 'Online JLPT Exam Dec 2025.zip,' aimed at deceiving officials into opening the malicious attachment.
ThreatCluster AI