Trusted service abuse

APT36 hides Operation RapidRust command traffic inside private GitHub repositories

Zscaler ThreatLabz says the Pakistan-aligned group worked government and defense targets in India and Afghanistan with four undocumented tools, one of them a Rust backdoor that takes its orders from files in a private repo.