Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for Command and Control

The Pakistan-aligned threat group Transparent Tribe has launched a cyber campaign targeting government and defense entities across India and Afghanistan.…

Defense teams in government agencies and defense entities across the Asia-Pacific region should audit GitHub repository access logs and private repository activity for anomalies. Update malware detection rules to include signatures for RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH once official indicators are published. Monitor outbound connections attempting to use private repositories as C2 channels.