> TritonInfoSec News
Home / Sep 19, 2026 / Story
0
#9 The Hacker News general September 18, 2026 at 15:24 UTC

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

By [email protected] (The Hacker News)

AI Summary

Zscaler ThreatLabz attributed a new campaign dubbed 'Operation [redacted]' to Pakistan-aligned APT36 (Transparent Tribe/Earth Karkaddan), deploying four previously undocumented tools — RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH — against Indian and Afghan government and defense entities, using private GitHub repositories for command-and-control. The use of GitHub as C2 infrastructure complicates detection and blocking efforts for defenders in targeted organizations.

Read full article → https://thehackernews.com/2026/09/transparent-trib…

Relevance score: 74.0/100

# More from September 19

  1. 1
    Cisco warns of max severity ISE zero-day exploited in attacks BleepingComputer
  2. 2
    Brevo Supply Chain Attack Injects Malware Into 100,000 Websites SecurityWeek
  3. 3
    Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation The Hacker News
  4. 4
    Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone The Hacker News
  5. 5
    Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents The Hacker News
  6. 6
    An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. The Hacker News
  7. 7
    Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root The Hacker News
  8. 8
    International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data CyberScoop
  9. 10
    New Check Point flaw lets hackers execute code with root privileges BleepingComputer