Pakistan

Reported Context (85)

The Pakistan-linked threat group used four malware variants—RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH—in their latest campaigns. APT36 Uses Four Malware Variants in RapidRust Campaign, DNS Analysis Finds
Pakistan-linked clusters have also historically targeted Indian government and health-related entities. CYFIRMA Report Tracks India Healthcare Threat Activity, With Pharma Claims Unconfirmed
backdoor called SprySOCKS in attacks targeting government entities in Honduras, Taiwan, Thailand, and Pakistan between 2023 and 2024. FishMonger, also tracked as Aquatic Panda and Earth Lusca, is assessed to be BlackX Bootkit Targets Windows Systems Missing Secure Boot Revocations
APT36 (Transparent Tribe), a Pakistan-based advanced persistent threat group, Zscaler’s 2026 Report Outlines Zero Trust Defenses for India’s AI and Cyber Risks
APT31 is China linked, Lazarus is North Korea, and Operation C-Major is Pakistan. Rapid7: High-Severity Flaws Exploited in Three Days as Ransomware Leads Q3 Threats

CVE (61)

Malware (183)

People (69)

Threat Actors (242)

MITRE ATT&CK (189)

Vendors (129)

Products (258)

Tools (117)

Industries (110)

Countries (116)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.