Briefing communicationscritical-infrastructure
APT36 Campaign Deploys Three-Malware Cluster Against Afghan Telecom and South Asian Infrastructure
Acronis TRU has documented three previously undisclosed malware families — PATCHCORD, SHEETCORD, and a GitHub-based C2 agent — targeting Afghan telecom providers and Indian critical infrastructure in an espionage campaign active since March 2026.