Uncovering the PATCHCORD Espionage Campaign: APT36's Stealthy Backdoor Tactics
This analysis delves into the PATCHCORD espionage campaign, attributed to APT36, which utilizes a previously undocumented backdoor and Google Sheets as a Command and Control (C2) channel. The campaign targets Afghan telecom and South Asian infrastructure, leveraging fake VPN tools for initial access. Understanding this threat is crucial for defenders to enhance their detection and mitigation strategies against sophisticated espionage operations.