Pakistan-linked threat actor, Transparent Tribe, is reportedly using malicious Android apps disguised as YouTube to distribute CapraRAT, a mobile remote access trojan, according to SentinelOne security researcher Alex Delamotte. The group, also known as APT36, often targets Indian entities for intelligence purposes and uses trojans disguised as secure messaging and calling apps, using social engineering tactics, while also harvesting sensitive data from infected devices.
International cooperation: PlugX malware deleted from US computers
The FBI and the US Department of Justice have remotely removed the PlugX malware from over 4,200 computers in the US, according to an official