APT36 Uses “Pahalgam Terror Attack” Lure in Targeted Phishing Against Indian Defense Personnel

APT36 weaponized a fake "Pahalgam Terror Attack" report to lure Indian government and defense personnel. The phishing emails contained links mimicking legitimate Indian government domains, leading to the download of CrimsonRAT.