APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2
Acronis links the PATCHCORD espionage campaign targeting Afghan telecom and South Asian critical infrastructure to APT36 with moderate confidence.
72
Malware
SHEETCORD
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 15, 2026
- Last mentionedAug 16, 2026
Timeline
2 articles · newest firstNew PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
Acronis links APT36 (Transparent Tribe) to new backdoors PATCHCORD and SHEETCORD targeting Afghan Telecom and Indian government, defense, and energy networks.
61
Related CVEs
by mentions- CVE-2024-6387100%8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd)
Appears with
- Acronisvendor · 2
- APT36threat actor · 2
- Transparent Tribethreat actor · 2
- Afghan Telecomvendor · 2
- PATCHCORDmalware · 2
- SHEETCREEPmalware · 1
- National Informatics Centerorganization · 1
- SHEETCREEPproduct · 1
- HACKERAI C2 Agentmalware · 1
- SuperShellproduct · 1
- PATCHCORDproduct · 1
- Googlevendor · 1
- National Informatics Centrevendor · 1
- National Informatics Centervictim · 1
- Afghan Telecomvictim · 1
- SHEETCORDproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.