MONSOON

G0042

▲ High Threat

SparkRAT China Campaign, Mobile Espionage Expansion

Origin India

Sponsor Government of India

Motivation Political espionage and strategic intelligence collection

Target Sectors

Government Agencies Diplomatic Missions Military Organizations Telecommunications Defense Sector

Spearphishing with malicious documents

Use of custom backdoors (e.g., BADNEWS)

Deployment of open-source RATs (e.g., SparkRAT)

Mobile malware for targeted espionage

MS Office vulnerability exploitation

Defense evasion via antivirus-specific bypasses

CISA Advisories ↗

Hacking the mainframe…