Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT

A threat actor linked to Pakistan has been identified targeting various sectors in India, employing multiple remote access trojans, including Xeno RAT, Spark RAT, and a new malware family named CurlBack RAT. This activity, reported by SEQRITE in December 2024, has specifically aimed at Indian entities in the railway, oil and gas, and external affairs ministries, indicating a significant expansion of the hacking group’s operations. The targeting of these critical sectors underscores the evolving nature of cyber threats faced by India.

Full Article