Suspected Indian state-sponsored threat operation DoNot Team, also known as APT-C-35, SECTOR02, and Origami Elephant, have targeted organizations in Afghanistan and Pakistan with the novel Firebird backdoor in recent attacks, according to The Hacker News. Attacks launched by DoNot Team also involved the deployment of the CSVtyrei downloader, which was similar to the first-stage Vtyrei payload, also known as BREEZESUGAR, leveraged in previous DoNot Team intrusions, a report from Kaspersky revealed.

Source: SC Magazine