Operation C-Major — APT Profile

Group targeting Indian Army or related assets in India, as well as activists and civil society in Pakistan. Attribution to a Pakistani connection has been made by TrendMicro and others.

Tools & malware

apk.capra_rat Mobile Malware
apk.stealthmango Mobile Malware
elf.sindoor Backdoor
win.andromeda Botnet
win.beendoor Backdoor
win.bezigate Backdoor
win.bozok Backdoor
win.breach_rat Remote Access Trojan
win.crimson Backdoor
win.darkcomet Backdoor
win.eliza_rat Remote Access Trojan
win.limepad Backdoor
win.luminosity_rat Remote Access Trojan
win.njrat Remote Access Trojan
win.peppy_rat Remote Access Trojan
win.unidentified_066 Backdoor

Vendor research

Operation C-Major Actors Use Mobile Spyware Trend Micro
Earth Karkaddan APT: Technical Brief Trend Micro
Investigating APT36 or Earth Karkaddan's Attack Chain and Malware Arsenal Trend Micro
Operation C-Major: Information Theft Campaign Targets Military Personnel in India Trend Micro

Countries linked to this actor

Pakistan origin

Read the full analysis on IntelFusions