PapRAT Cyber-Espionage Campaign Targets South Asia

# PapRAT Cyber-Espionage Campaign Targets South Asia

https://gcdradar.vercel.app/incidents/paprat-cyber-espionage-campaign-targets-south-asia · AIR-2026-1719 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed targeted cyber-espionage campaign in the wild.
- Fix status: No fix needed
- First reported: 2026-11-02
- AI role: No AI role
- Products: PapRAT

## Summary

An India-linked threat group is conducting cyber-espionage operations against organizations in South Asia. The attackers utilize legitimate Windows functionality across three distinct attack chains to maintain persistence and gather intelligence.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-02: PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia (https://darkreading.com/cyberattacks-data-breaches/paprat-cyberespionage-campaign-bitter-south-asia)

## Sources

- 2026-11-02 Dark Reading: PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia https://darkreading.com/cyberattacks-data-breaches/paprat-cyberespionage-campaign-bitter-south-asia
- 2026-11-09 The Hacker News: Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.