Skip to content
Threat Feed
Subscribe

Product

Complaint Management System

2 briefs RSS
high advisory

Multi-Group Espionage Targets Pakistani Law Enforcement via Weaponized Police Portal

Suspected China- and India-aligned threat actors conducted sustained cyber espionage campaigns between February 2024 and April 2026, compromising Pakistani law enforcement organizations' web applications, network appliances, and email gateways, including the Balochistan Police's Complaint Management System to deploy malware like PlugX, ShadowPad, Cobalt Strike, Remcos RAT, a Rust stager (cms_plugin.exe), and AsyncRAT.

FortiMail +2 cyber-espionage nation-state malware rat windows
3r 5t 5i
high advisory

Rival Espionage Actors Converge on Pakistani Law Enforcement

Suspected China- and India-nexus threat actors conducted separate cyberespionage operations against several Pakistani law enforcement organizations, including Balochistan Police, from February 2024 to April 2026, compromising web applications and network appliances with tools like PlugX, ShadowPad, Cobalt Strike, and Remcos to exfiltrate sensitive criminal and biometric data.

web applications +2 cyberespionage nation-state data-exfiltration web-application command-and-control malware
1r 7t 13i