Transparent Tribe APT actively lures Indian Army amidst increased targeting of Educational Institutions

Quick Heal’s APT Team encountered an active campaign by APT Transparent Tribe (APT36) that is luring the Indian Army into opening the file themed ‘Revision of Officers posting policy.’ Malicious macro-enabled PowerPoint add-on files (PPAM) are utilized to wrap Crimson RAT payloads by embedding archive files as OLE objects.