Recently, Pakistan hackers allegedly targeted government and energy organizations in India, although some compromised entities were also located in Afghanistan.  The attackers used a newly-developed remote access Trojan dubbed “ReverseRAT” that featured diverse functionality to include sophisticated evasion techniques to avoid detection and obfuscate attacker presence on compromised machines. 

In early May we began a discussion with our OODA Network members that started with an observation. About six months prior we had been through the Solar Winds attack, which from our perspective was clearly one of the most damaging attacks/espionage operations in history. Soon after that, the attack series named Hafnium by Microsoft was…