Nomadic Octopus’ Paperbug Campaign.pdf

Operation "Paperbug" is an espionage campaign attributed to Nomadic Octopus (DustSquad) targeting Tajikistan government officials, a national telecom provider, and OT devices. The report documents Delphi-based Octopus/Paperbug backdoors, extensive C2 panel screenshots, operator workflows, TTPs (credential theft, screenshots, remote command execution, lateral movement), and IOCs (domains, IPs, hashes) to support detection and mitigation.