The cyber group Tomiris has changed its strategy, using public services like Telegram and Discord for command-and-control in attacks against government entities in Central Asia. Their recent campaigns involve spear-phishing emails and malware that targets high-value political infrastructure, employing a variety of custom and open-source tools.

APT36 is a sophisticated phishing campaign targeting Indian government entities, primarily using deceptive emails to harvest sensitive information. The campaign employs various tactics to circumvent security measures, posing significant risks to national cybersecurity. Continuous monitoring and awareness are crucial for mitigating these threats.