Acronis

Transparent Tribe Expands Targeting to Indian Startups in Cybersecurity

First seen 4 Feb 2026, 17:06 UTC • Acronis

•68% similarity •37.9

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Acronis Threat Research Unit has reported that the APT36 group, known as Transparent Tribe, has shifted its focus to target India's startup ecosystem, particularly in the cybersecurity sector. This change includes the use of lures related to defense events and internal government communications to exploit vulnerabilities within these organizations.

ThreatCluster AI

Attack Flow

10 entities, 18 inferred relationships (STIX 2.1).

Threat Actor (2)

Apt36
Transparent Tribe

Technique (4)

Malware
Phishing
Trojan
T1566 - Spearphishing Attachment

Organization (1)

Voldebug

Malware (2)

Crimson RAT
GymRAT

Tool (1)

PowerShell

Relationships

Apt36 uses Crimson RAT
Apt36 uses GymRAT
Transparent Tribe uses Crimson RAT
Transparent Tribe uses GymRAT
Apt36 uses PowerShell
Transparent Tribe uses PowerShell
Apt36 uses Malware
Apt36 uses Phishing
Apt36 uses Trojan
Apt36 uses T1566 - Spearphishing Attachment
Transparent Tribe uses Malware
Transparent Tribe uses Phishing
Transparent Tribe uses Trojan
Transparent Tribe uses T1566 - Spearphishing Attachment
Apt36 targets Voldebug
Transparent Tribe targets Voldebug
Crimson RAT targets Voldebug
GymRAT targets Voldebug

Community

Browse all →

Transparent Tribe Expands Targeting to Indian Startups in Cybersecurity

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading