APT36

APT36, also known as Transparent Tribe, is a suspected Pakistan-based threat group active since at least 2013. The group primarily targets diplomatic, defense, and research organizations in India and Afghanistan, with a focus on regional rival India. APT36 employs spear phishing with malicious attachments and uses unique watering hole techniques to deliver malware such as MOONDOOR and BabylonRAT.