APT36 Uses RUSTYSHADE and USB Malware to Target Government and Defense Organizations

Pakistan-linked threat actor APT36 has launched a new cyber campaign targeting government and defense organizations in India and Afghanistan. The campaign, tracked as Operation RapidRust, was identified by Zscaler ThreatLabz in August 2026 and shows the group continuing to update its malware and post-compromise methods. The operation uses several...