PapRAT espionage campaign targets South Asia organizations

The India-linked threat group PapRAT is conducting cyber espionage operations against organizations in South Asia, exploiting legitimate Windows functionality across three distinct attack chains. The campaign leverages built-in system tools to evade detection and establish persistence. Defenders should monitor for suspicious Windows process execution patterns and implement application whitelisting policies.