Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

APT36 Targets Indian Infrastructure with Desktop Lures and Poseidon Backdoor

hunt.io | blog | #phishing | #india | #apt36 | #transparent-tribe | #poseidon-backdoor | #desktop-files

Summary

APT36 expands beyond military targets to Indian Railways, oil and gas, and the Ministry of External Affairs, using .desktop lures, cron persistence, and the Poseidon backdoor.
Published
Collected

original ↗

Related coverage

blog · hunt.io
APT36-Linked ClickFix Campaign Spoofs Indian Ministry of Defence, Targets Windows & Linux Users
A ClickFix-style chain spoofs India's Ministry of Defence press-release portal, cloned with HTTrack, and routes Windows and Linux visitors to OS-specific pages that stage malware.
blog · hunt.io
Track Threat Actors Using Real-World IOC Pivoting
How Hunt.io turns threat actor profiles and IOC pivoting into actionable intelligence, from APT36's 52 IPs and 265 hosts to infrastructure behind the Marks & Spencer and Oyster incidents.
blog · bugcrowd.com
Hacker Spotlight: Dipen
Hacker Spotlight interview with Dipen, an India-raised bug bounty hunter of over five years who specializes in business logic, access control, and server-side vulnerabilities.
blog · hackerone.com
Ambassador Spotlight: Encryptsaan123
HackerOne ambassador Encryptsaan123 discusses promoting ethical hacking in Odisha, India, why mentorship matters for bug bounty newcomers, and building local hacker communities through meet-ups.
blog · hackerone.com
Ambassador Spotlight: DrSniper
HackerOne ambassador DrSniper describes building a cybersecurity community via his 90,000-subscriber YouTube channel, leading the India-Haryana club, and collaborating with fellow researchers.
blog · hackerone.com
Ambassador Spotlight: Emperor
Raviraj, aka Emperor, is a HackerOne product security analyst and Brand Ambassador for western India, discussing community building in Gujarat and hosting meetups at events like Bsides Ahmedabad.
back