APT36 has deployed a new RustyShade variant, RustyMove, that is targeting Indian and Afghan government systems. #APT36 #RustyShade #RustyMove #India #Afghanistan https://malware.news/t/operation-rapidrust-apt36-deploys-rustyshade-rustymove-psnatch-and-bashnatch/125646

APT36 turns GitHub into a spy server - and a Rust worm smuggles malware across air gaps via USB. https://intel.threadlinqs.com/threat/TL-2026-2545 #ThreatIntel #RUSTYSHADE #RUSTYMOVE #PSNATCH

APT36's Operation RapidRust targeted India and Afghanistan government and defense orgs with RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH for encryption, exfiltration, persistence, and USB spread. #APT36 #India #RUSTYSHADE