Transparent Tribe: Evolution analysis, part 2

Transparent Tribe (PROJECTM / MYTHIC LEOPARD) is actively targeting Indian military and government personnel using malicious Office documents and trojanized Android apps (e.g., desi-porn.apk, fake Aarogya Setu) to deploy modified Crimson and AhMyth-based Android RATs that exfiltrate files, audio, SMS, contacts and location; the report documents new commands and behaviors, C2 infrastructure (tryanotherhorse.com, 212.8.240.221:5987, upload URL), distribution URLs and MD5 IoCs, and notes a connection to ObliqueRAT.