Tag: double extension

1 Attack Reports | 0 Vulnerabilities

Attack reports

Twitter Feed - nextronresearch - 17-06-2026

SideCopy, also tracked as APT36 or Transparent Tribe, has launched a new attack campaign targeting Indian defense personnel using a fake 'Minutes Of Meeting' document as lure. The attack employs an identical playbook to previous operations: a double-extension Minutes Of Meeting.docx.lnk file execut…
rat
transparent tribe
apt36
2026-06-18
decoy document
double extension
indian defense targeting
pdfdocs rat
persistence hkcu
powershell stager
Published: June 18, 2026
Downloadable IOCs: 4
Click here to see more Attack Reports