Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repos for C2
The Pakistan-aligned threat group Transparent Tribe (APT36) is targeting government and defense entities in India and Afghanistan with new cyberattacks. Zscaler ThreatLabz reports the use of previously undocumented Rust-based tools, RUSTYSHADE and RUSTYMOVE, along with PSNATCH and BASHNATCH. These tools leverage private GitHub repositories for command and control, indicating an evolving and sophisticated threat.