#OperationShadowRecruit
Operation ShadowRecruit Uses Fake Government Job Ads to Plant SheetAgent RAT on Indian Systems

Operation ShadowRecruit targets Indian job seekers with SheetAgent RAT, abusing ControlR and Google Sheets for C2. Seqrite links it to APT36. #OperationShadowRecruit #APT36 #SheetAgent #Malware #InfoSec…
Operation ShadowRecruit Uses Fake Government Job Ads to Plant SheetAgent RAT on Indian Systems
Operation ShadowRecruit targets Indian job seekers with SheetAgent RAT, abusing ControlR and Google Sheets for C2. Seqrite links it to APT36. #OperationShadowRecruit #APT36 #SheetAgent #Malware #InfoSec At a Glance Actor or group Suspected APT36 (medium confidence) Activity type Multi-stage malware campaign with a recruitment lure Targets Indian government job seekers; public sector, education, technology Scale
securityonline.info
July 20, 2026 at 7:31 AM