Securitybrief.Asia APT36's Ongoing Espionage Campaign Against Indian Government
Article Content
Browse articles 
APT36, also known as Transparent Tribe, has been conducting persistent cyber espionage campaigns against the Indian government and defense organizations for over a decade. This espionage ecosystem, which includes the SideCopy cluster, continuously adapts its tactics to probe and exploit vulnerabilities in its targets. The campaigns highlight the enduring nature of state-sponsored cyber threats in the region.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
Timeline
Recent
APT36 adapts tactics in ongoing campaigns
Date unknown
APT36 begins targeting Indian government and defense organizations
Date unknown
SideCopy cluster identified as closely aligned with APT36
More articles in this cluster (2)
Following this threat?
Track APT31 and ARES RAT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…