Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

As cited

Copy frozen at 2026-09-18 17:14 UTC (site build).

threat intel

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

Transparent Tribe, a Pakistan-aligned threat group, deployed previously undocumented Rust-based backdoors named RUSTYSHADE and RUSTYMOVE against government and defense targets in India and Afghanistan. The campaign, tracked as Operation, leverages private GitHub repositories for command and control communications.

Why it matters: Government and defense practitioners in India and Afghanistan face direct targeting; organizations should hunt for these new Rust-based tools and monitor GitHub activity for unauthorized C2 communications.

Source published

2026-09-18 15:24 UTC

First seen by Cybersecurity Tracker

2026-09-18 16:14 UTC