KINWILDER

Operation C-Major

No sourced public emblem in this profile.

reference profile · reported nexus: PK (not nationality)

Group targeting Indian Army or related assets in India, as well as activists and civil society in Pakistan. Attribution to a Pakistani connection has been made by TrendMicro and others.

Source-reported aliases: C-Major, Transparent Tribe, Mythic Leopard, ProjectM, APT36, APT 36, TMP.Lapis, Green Havildar, COPPER FIELDSTONE, Earth Karkaddan, Storm-0156. Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): No country-level metadata

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf

https://www.amnesty.org/en/documents/asa33/8366/2018/en/

https://www.crowdstrike.com/blog/adversary-of-the-month-for-may/

https://unit42.paloaltonetworks.com/unit42-projectm-link-found-between-pakistani-actor-and-operation-transparent-tribe

https://mkd-cirt.mk/wp-content/uploads/2018/08/20181009_3_1_M-Trends2018-May-2018-compressed.pdf

https://nciipc.gov.in/documents/NCIIPC_Newsletter_July18.pdf

https://cysinfo.com/cyber-attack-targeting-cbi-and-possibly-indian-army-officials

https://s.tencent.com/research/report/669.html

https://www.fireeye.com/blog/threat-research/2016/06/apt_group_sends_spea.html

https://www.secureworks.com/research/threat-profiles/copper-fieldstone

https://www.trendmicro.com/en_us/research/22/a/investigating-apt36-or-earth-karkaddans-attack-chain-and-malware.html

https://www.sentinelone.com/labs/capratube-transparent-tribes-caprarat-mimics-youtube-to-hijack-android-phones/

https://www.microsoft.com/en-us/security/blog/2024/12/04/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage/

https://www.reco.ai/blog/how-apt36-elizarat-redefines-cyber-espionage

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost