A Pakistani threat actor known as 'Transparent Tribe' is reportedly enhancing its toolset to conduct cyberattacks in Afghanistan, primarily targeting vulnerable organizations associated with the Taliban. Recent operations have involved the use of new malware variants, namely 'Patchcord' and 'Sheetcord,' which aim to infiltrate Afghan government and telecom entities while attempting to breach Indian organizations, albeit without confirmed successes.
'Patchcord' employs a distinctive shortcut hijacking technique to maintain persistence on infected systems, while 'Sheetcord' has capabilities for remote access and command execution. Transparent Tribe's phishing efforts include impersonating reputable organizations to facilitate attacks, indicating a focused strategy of social engineering.
Despite its apparent gains against lesser-prepared targets, the group's tactics reflect a lower sophistication level compared to adversaries faced by better-defended nations like India.