Connect with us

Indian Defense

Alleged Pakistan-Linked Cyber Espionage Group, Tracked As Transparent Tribe, Targets Indian Entities With A New Windows Malware

Published

on

Alleged Pakistan-Linked Cyber Espionage Group, Tracked As Transparent Tribe, Targets Indian Entities With A New Windows Malware


Researchers from Cisco Talos warn that the Pakistan-linked APT (Advanced Persistent Threat) group Transparent Tribe expanded its Windows malware arsenal. The group used the new malware dubbed ObliqueRAT in cyberespionage attacks against Indian targets.

The Operation Transparent Tribe (Operation C-Major, APT36, and Mythic Leopard) was first spotted by Proofpoint Researchers in Feb 2016, in a series of cyber espionage operations against Indian diplomats and military personnel in some embassies in Saudi Arabia and Kazakhstan. At that time, the researchers tracked the sources IP in Pakistan, the attacks were part of a wider operation that relies on multi-vector such as watering hole websites and phishing email campaigns delivering custom RATs dubbed Crimson and Peppy. These RATs are capable of exfiltrate information, take screenshot, and record webcam streams.

Transparent Tribe has been active since at least 2013, it targeted entities across 27 countries, most of them in Afghanistan, Germany, India, Iran, and Pakistan.

In the recent wave of attacks, threat actors employed domains mimicking legitimate Indian military and defense organizations, and other domains posing as content-hosting sites that were used to host malicious artifacts.

“Transparent Tribe, also known as APT36 and Mythic Leopard, continues to create fake domains mimicking legitimate military and defense organizations as a core component of their operations. Cisco Talos’ previous research has mainly linked this group to CrimsonRAT, but new campaigns show they are expanding their Windows malware arsenal with ObliqueRAT.” read the analysis published Cisco Talos. “While military and defense personnel continue to be the group’s primary targets, Transparent Tribe is increasingly targeting diplomatic entities, defense contractors, research organizations and conference attendees, indicating that the group is expanding its targeting.”
These domains were used to distribute weaponized docs used to deliver CrimsonRAT and ObliqueRAT. Experts observed the hackers using resume documents and archives, such as ZIPs and RARs, with alluring themes distributing CrimsonRAT.

Email and maldoc lures employed to deliver the malware used multiple themes, including conference agendas, honeytrap lures and diplomatic themes.

“The actors recently deviated from the CrimsonRAT infection chains to make their ObliqueRAT phishing maldocs appear more legitimate. For example, attackers leveraging ObliqueRAT started hosting their malicious payloads on compromised websites instead of embedding the malware in the maldoc.” continues the report. “In one such case in early 2021, the adversaries used iiaonline[.]in, the Indian Industries Association’s legitimate website, to host ObliqueRAT artifacts.”

In other attacks, the group used fake domains for the 7th Central Pay Commission (7CPC) of India and an Indian think tank called Centre For Land Warfare Studies (CLAWS),

“Transparent Tribe relies heavily on the use of maldocs to spread their Windows implants,” the researchers said. “While CrimsonRAT remains the group’s staple Windows implant, their development and distribution of ObliqueRAT in early 2020 indicates they are rapidly expanding their Windows malware arsenal.”

Experts noticed that the Transparent Tribe’s TTPs remained largely unchanged since 2020, but the cyberspies continues to implement new lures as part of its arsenal.

Talos researchers also published the Indicators of Compromise (IoCs) for the new attacks.





Source link

Continue Reading
Click to comment

Leave a Reply

Indian Defense

INS Arihant’s Nuke-Capable K-4 Submarine-Launched Ballistic Missile ‘Ready To Roll’

Published

on

By

INS Arihant’s Nuke-Capable K-4 Submarine-Launched Ballistic Missile ‘Ready To Roll’


NEW DELHI: India tested its nuclear capable K-4 submarine-launched ballistic missile (SLBM), designed to have a strike range of 3,500 km, for the second time in six days on Friday. The missile test, as the one conducted on January 19, was undertaken from an undersea platform in the shape of a submersible pontoon off the coast of Andhra Pradesh according to a report by Rajat Pandit of TOI.

The solid-fuelled K-4 missile is being developed by DRDO to arm the country’s nuclear-powered submarines in the shape of INS Arihant and its under-development sister vessels. INS Arihant, which became fully operational in November 2018 to complete India’s nuclear triad, is currently armed with the much shorter K-15 missiles with a 750 km range.

“The K-4 is now virtually ready for its serial production to kick-off. The two tests have demonstrated its capability to emerge straight from underwater and undertake its parabolic trajectory,” said a source.

India has the land-based Agni missiles, with the over 5,000-km Agni-V inter-continental ballistic missile now in the process of being inducted, and fighter jets jury-rigged to deliver nuclear weapons. But INS Arihant gives the country’s deterrence posture much more credibility because nuclear-powered submarines armed with nuclear-tipped missiles are considered the most secure, survivable and potent platforms for retaliatory strikes.

Once the K-4 missiles are inducted, they will help India narrow the gap with countries like the US, Russia and China, which have over 5,000-km range SLBMs. The K-4 missiles are to be followed by the K-5 and K-6 missiles in the 5,000-6,000 km range class.

The 6,000-ton INS Arihant, which is propelled by an 83 MW pressurised light-water reactor at its core, in turn, is to be followed by INS Arighat, which was launched in 2017. The next generation of nuclear submarines, currently called S-4 and S-4*, will be much larger in size.





Source link

Continue Reading

Indian Defense

After Upgradation, Sukhoi Su-30MKI Indigenisation To Reach 78%

Published

on

By

After Upgradation, Sukhoi Su-30MKI Indigenisation To Reach 78%


India has received clearance to upgrade 84 Sukhoi Su-30MKI fighter jets, which will result in 78% indigenization after the upgrade

In a significant step towards bolstering its military might with indigenously developed technology, India is poised to witness its Russian-origin Sukhoi Su-30MKI fighter jets evolve into a domestic platform. Speaking at a recent lecture.

The upgrade program is being led by Hindustan Aeronautics Limited (HAL) in partnership with the Indian Air Force and other partners. The upgrade is expected to cost US$7.5 billion.

The Defence Acquisition Council (DAC) granted Acceptance of Necessity (AoN) for the upgrade. The upgrade is part of India’s efforts to improve the capabilities of its primary fighter aircraft, it refers to as the “Super Sukhoi”.

This initiative is a part of a larger effort by the Indian Air Force to modernize its ageing fleet. Air Chief Marshal Chaudhari asserted the critical role of an offensive air force as demonstrated in current global conflicts and emphasized India’s move towards an indigenized arsenal. To this end, the IAF has been proactive, from upgrading its Mirage 2000 to enhancing its MiG-29 fleet.

In summary, the IAF’s commitment to updating their combat forces with the latest technology, including shifting to fifth-generation fighter jets, ensures operational preparedness and a strong deterrence capability. The gradual indigenization of its air fleet marks a pivotal shift in India’s defence landscape, reducing dependency on foreign imports and fostering technological sovereignty.





Source link

Continue Reading

Indian Defense

Akash Weapon System Exports For The Armenian Armed Forces Gathers Pace

Published

on

By

Akash Weapon System Exports For The Armenian Armed Forces Gathers Pace


According to unconfirmed reports, Armenia is a top contender for an export order for Akash SAM system manufactured by Bharat Dynamics Limited (BDL).

While there is no official confirmation because of the sensitivities involved, documents suggest that the order for the same has already been placed the report further added.
There are nine countries, in turn, which have shown interest in the indigenously-developed Akash missile systems, which can intercept hostile aircraft, helicopters, drones and subsonic cruise missiles at a range of 25-km. They are Kenya, Philippines, Indonesia, UAE, Bahrain, Saudi Arabia, Egypt, Vietnam and Algeria reported TOI.

The Akash export version will also be slightly different from the one inducted by the armed forces. The 100-km range air-to-air Astra missiles, now entering production after successful trials from Sukhoi-30MKI fighters, also have “good export potential”, said sources.

Akash is a “tried, tested and successfully inducted systems”. Indian armed forces have ordered Akash systems worth Rs 24,000 crore over the years, and MoD inked a contract in Mar 2023 of over Rs 9,100 crores for improved Akash Weapon System

BDL is a government enterprise under the Ministry of Defence that was established in 1970. BDL manufactures surface-to-air missiles and delivers them to the Indian Army. BDL also offers its products for export.

Akash Weapon System

The AWS is a Short Range Surface to Air Missile (SRSAM) Air Defence System, indigenously designed and developed by Defence Research and Development Organisation (DRDO). In order to meet aerial threats, two additional Regiments of AWS with Upgradation are being procured for Indian Army for the Northern borders. Improved AWS has Seeker Technology, Reduced Foot Print, 360° Engagement Capability and improved environmental parameters.

The project will give a boost to the Indian missile manufacturing industry in particular and the indigenous defence manufacturing ecosystem as a whole. The project has overall indigenous content of 82% which will be increased to 93% by 2026-27.

The induction of the improved AWS into the Indian Army will increase India’s self-reliance in Short Range Missile capability. This project will play a role in boosting the overall economy by avoiding outgo of precious foreign exchange to other countries, increasing employment avenues in India and encouraging Indian MSMEs through components manufacturing. Around 60% of the project cost will be awarded to the private industry, including MSMEs, in maintaining the supply chain of the weapon system, thereby creating large scale of direct and indirect employment.





Source link

Continue Reading

Trending