🚨 Cyber Threat Alert: Pakistan-Linked Group Targeting Indian Military Systems with “DeskRAT” Spyware
A Pakistan state-sponsored hacking group, Transparent Tribe (APT-36), has been observed attempting to infect Indian military and government systems through targeted phishing campaigns — this time using a new spyware called DeskRAT.
🔹 What’s Happening:
•Security researchers have discovered that APT-36 is distributing malicious email attachments disguised as official military or government documents.
•The malware specifically targets systems running BOSS Linux, India’s government-backed operating system.
•Once executed, DeskRAT grants attackers complete remote access to the infected system — allowing data theft, command execution, and continuous surveillance.
🔹 What is a RAT?
A Remote Access Trojan (RAT) is a form of malware that covertly provides hackers with full control over a victim’s machine.
It works just like legitimate remote-control tools (such as TeamViewer or RDP), but operates silently and maliciously — enabling the attacker to steal files, monitor user activity, and manipulate system operations.
🔹 Key Takeaways:
•The campaign underscores the growing sophistication of Pakistan-linked cyber espionage efforts against India.
•Indian defense and government personnel are advised to avoid opening unsolicited attachments and to verify the authenticity of emails — even if they appear official.
•Updating antivirus signatures, patching systems, and monitoring network logs for suspicious activity are essential defenses.
🔹 Sources:
•The Hacker News | HivePro Threat Advisory | Cyfirma Research
India’s cyber defense agencies are closely monitoring this campaign — reinforcing the urgent need for strong cybersecurity hygiene across all government and defense networks.