A peek into APT36’s updated arsenal

Introduction

In July 2023, Zscaler ThreatLabz discovered new malicious activity perpetuated by the Pakistan-based advanced persistent threat group (APT36). APT36 is a sophisticated cyber threat group with a history of conducting targeted espionage operations in South Asia. We observed APT36 targeting Indian government sectors using a previously undocumented Windows RAT, new cyber espionage utilities for Linux, new distribution mechanisms, and a new attack vector used against the Linux environment.

In this blog, we will examine the latest tools employed by …

advanced advanced persistent threat apt36 arsenal asia cyber cyber espionage cyber threat espionage government history introduction july july 2023 malicious operations pakistan persistent persistent threat rat sectors south targeting threat threat group threatlabz utilities windows zscaler