Security2 dSeptember 18, 2026, 22:24

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

The Pakistan-linked group Transparent Tribe (APT36) is attacking government and defense targets in India and Afghanistan. Zscaler ThreatLabz discovered new tools RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH, with private GitHub repositories used for C2.

The Hacker News Open source

Targets include government and defense entities in India and Afghanistan
Four new tools discovered: RUSTYSHADE, RUSTYMOVE, PSNATCH, BASHNATCH
Private GitHub repositories used for backdoor command and control

#GitHub

Plugin4Shell: one git trick bypassed safety locks on four AI coding agents

Security

Tetragon in AWS CodeBuild blocks npm postinstall network access

Security

Kaspersky uncovers malware campaign spread via movie torrents

Security

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

Plugin4Shell: one git trick bypassed safety locks on four AI coding agents

Tetragon in AWS CodeBuild blocks npm postinstall network access

Kaspersky uncovers malware campaign spread via movie torrents

Z.ai silently uploaded devs' local data: 313MB and 564 upload attempts