Pakistan Archives - Recon Bee

A threat actor operating in Pakistan has used previously unreported tradecraft to attack Indian government agencies in two campaigns. Zscaler ThreatLabz discovered the campaigns in September 2025 and nicknamed them Gopher Strike and Sheet Attack. Researchers Sudeep Singh and Yin Hong Chang stated, We assess with medium confidence that the activity identified during this analysis might originate from a new subgroup or another Pakistan-linked group operating in parallel, even though these campaigns share some similarities with the Pakistan-linked Advanced Persistent Threat (APT) group, APT36. The use of reputable services like Google Sheets, Firebase, and email for command-and-control (C2) is how Sheet Attack got its moniker. However, it is determined that Gopher Strike used phishi...

Users in South Asia, especially those in India and Pakistan, have been the main target of an ongoing Android malware campaign called eXotic Visit. The virus is spread through specialized websites and the Google Play Store. According to a Slovak cybersecurity firm, there is no recognized threat actor or organization associated with the current activity that began in November 2021. It tracks the organization known as Virtual Invaders that is responsible for the operation. Downloaded applications function as intended, but they also contain code from the open-source Android XploitSPY RAT, according to a technical analysis published today by Lukáš Štefanko, a security researcher at ESET. It is said that the marketing is quite focused, as the apps that are available on Google Play have...

Tag: Pakistan

Experts Detect Pakistan-Linked Cyber Campaigns Aimed at Indian Government Entities

‘eXotic Visit’ Spyware Campaign Targets Android Users in India and Pakistan