Chinese cybersecurity firm discovers India based APT group launches attack on Pakistan government

A Chinese cybersecurity firm discovered that an APT group based in India known as “Confucius” had launched new attacks on Pakistan’s government and military institutions.

To steal sensitive data, the group primarily targeted the governments, military, and energy sectors of neighbouring countries such as China, Pakistan, and Bangladesh.

To attack targets, it employs spear phishing emails and phishing websites, as well as unique social engineering techniques.

The group operates in the name of Pakistani government employees and sends targeted spear phishing emails.

When recipients open or download the documents, Trojan horse programmes are installed on their computers, stealing all of the data.

Antiy examined the group’s attack samples and discovered that the hackers shared tools and codes with another APT group, SideWinder.