Transparent Tribe: Evolution analysis, part 1

Transparent Tribe (aka PROJECTM / MYTHIC LEOPARD) continues active espionage campaigns targeting primarily Indian and Afghan military and government personnel using a custom .NET RAT family called Crimson and a USBWorm component for removable-media propagation and data theft; Kaspersky provides detailed technical analysis of Crimson server versions, client modules (Thin/Main client, USB driver/worm, passlogger, keylogger), distribution telemetry (~1,000+ victims across 27 countries), code snippets, and IoCs including hashes, C2 IPs and domains.