Pakistan-linked threat actor, Transparent Tribe, is reportedly using malicious Android apps disguised as YouTube to distribute CapraRAT, a mobile remote access trojan, according to SentinelOne security researcher Alex Delamotte. The group, also known as APT36, often targets Indian entities for intelligence purposes and uses trojans disguised as secure messaging and calling apps, using social engineering tactics, while also harvesting sensitive data from infected devices.
Healthcare ranks as third-most targeted ransomware victim
Healthcare became the third-most targeted sector by ransomware from 2023 to 2024, with a 32% increase in attacks, according to Black Kite. The research revealed