security1 publisher
APT36 derives its AES key from the same GitHub token it ships inside the binary
Zscaler ThreatLabz traced August 2026 attacks on Indian and Afghan government and defense targets to a new Rust backdoor that takes orders from private GitHub repositories. Its encryption key is a hash of a token sitting in cleartext in the sample.
Publishers:zscaler.com
Reality
- Evidence62
- Adoption38
- Hype gap+12
- Incentives60
- Confidence58