Login Subscribe

Threat Intelligence

APT36 Exploits ISO Attachments to Deploy Crimson RAT in Indian Startups

Pakistan‑aligned APT36 has shifted its focus to India’s fast‑growing startup ecosystem. The group is delivering spear‑phishing emails that contain ISO‑based attachments. When opened, the ISO automatically extracts a malicious Windows shortcut (LNK) which executes a payload that installs the Crimson Remote Access Tool. Crimson RAT provides the attackers with full system control, enabling credential theft, keylogging, screenshot capture, and exfiltration of sensitive business data.

The campaign threatens the confidentiality of proprietary technology, financial information, and intellectual property held by these young companies, and could serve as a foothold for broader supply‑chain intrusion. Defenders must prioritize detection of ISO‑based delivery methods, block execution of shortcut files, and monitor for known Crimson RAT indicators on endpoints and network traffic. Strengthening email filtering, user awareness training, and rapid incident response are essential to mitigate this emerging threat.

Categories: Threat Intelligence, Vulnerabilities & Exploits, Compliance & Regulation

Source: Read original article

Read next

AI Travel‑Hacking Toolkit on GitHub Sparks Fraud Risks for Rewards Programs

AI Travel‑Hacking Toolkit on GitHub Sparks Fraud Risks for Rewards Programs

Collection BriefAI SecurityGITHUB.COM AI Travel‑Hacking Toolkit on GitHub Sparks Fraud Risks for Rewards Programs Why it mattersAI tools that facilitate large‑scale data scraping and automation can be weaponized for financial fraud; security professionals should assess risk, enforce usage policies, and collaborate with platforms to detect abusive patterns.

OpenClaw AI Agents Weaponized: Reverse Shells and Adaptive Cognitive Rootkits Spread Fast

OpenClaw AI Agents Weaponized: Reverse Shells and Adaptive Cognitive Rootkits Spread Fast

Collection BriefAI SecurityBLOG.VIRUSTOTAL.COM OpenClaw AI Agents Weaponized: Reverse Shells and Adaptive Cognitive Rootkits Spread Fast Why it mattersThe weaponization of AI agents expands the attack surface, enabling automated, adaptive payload delivery; security teams must incorporate AI‑aware detection strategies and monitor abnormal agent behavior to prevent large‑scale

Proposed $707M CISA Funding Cut Threatens U.S. Cyber Defense Capabilities

Proposed $707M CISA Funding Cut Threatens U.S. Cyber Defense Capabilities

Collection BriefComplianceGO.THEREGISTER.COM Proposed $707M CISA Funding Cut Threatens U.S. Cyber Defense Capabilities Why it mattersCISA plays a central role in coordinating vulnerability disclosures and protecting critical infrastructure; budget reductions could impair collective defense mechanisms, increasing the likelihood of unmitigated attacks on essential services. Congress is moving to

Comments ()