Security firm CYFIRMA has linked a new campaign by Transparent Tribe (APT36) to targeted attacks against Indian government, academic and strategic organisations using a remote access trojan (RAT) that gives attackers persistent control of compromised machines. The operation begins with a spear‑phishing email containing a ZIP archive with a
