Threat Actor
APT-C-08
- First Reported
- Jul 10, 2026
- Latest Reported
- Nov 2, 2026
Reported Context (4)
- FortiGuard Labs attributes the campaign to BITTER with high confidence based on lure filenames, C2 patterns, file metadata, and malware analysis. The article describes BITTER as a suspected South Asian cyberespionage group. BITTER Uses Three Infection Chains to Deploy PapRAT in South Asia
- The campaign is attributed with high confidence to Bitter, which the article describes as targeting organizations in the region with cyberespionage attacks. Bitter Uses Three Infection Chains to Deploy PapRAT Across South Asia
- Named by the source as an alias of Mysterious Elephant, which is assessed to share infrastructure and tactical overlaps with the Remcos-related intrusion set. Researchers Detail Espionage Campaigns Targeting Pakistani Police
- Qihoo 360 tracking name for a threat actor whose infrastructure, tooling, and TTPs overlap to varying degrees with TAG-179 activity. The article explicitly gives Bitter as an alternate name for APT-C-08. SentinelLABS Details Suspected China- and India-Nexus Espionage Against Pakistani Police
Malware (7)
People (4)
Threat Actors (6)
MITRE ATT&CK (18)
Vendors (2)
Products (8)
Tools (1)
Industries (6)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.