APT36 Phishing Campaign Targets Indian Defense Using Credential-Stealing Malware

APT36 is conducting a targeted phishing campaign against Indian defense personnel. The campaign uses spear-phishing emails with malicious PDF attachments that mimic official government documents to deliver credential-stealing malware.