{"id":97413,"date":"2025-03-27T08:28:35","date_gmt":"2025-03-27T08:28:35","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=97413"},"modified":"2025-03-27T08:28:39","modified_gmt":"2025-03-27T08:28:39","slug":"pakistan-apt-hackers-create-weaponized-indiapost-website","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/","title":{"rendered":"Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows &amp; Android Users"},"content":{"rendered":"\n<p>Cybersecurity researchers have uncovered a sophisticated attack campaign leveraging a fraudulent website that impersonates the Indian Post Office to deliver malware to both Windows and Android users.<\/p>\n\n\n\n<p>The fake website, hosted at postindia[.]site, employs device detection techniques to serve tailored malicious payloads based on the victim&#8217;s operating system, demonstrating the threat actor&#8217;s technical sophistication and calculated approach.<\/p>\n\n\n\n<p>When accessed via desktop browsers, the malicious site attempts to gain clipboard access and prompts users to download a PDF containing &#8220;<a href=\"https:\/\/cybersecuritynews.com\/clickfix-leveraging-gmeet-and-zoom\/\" target=\"_blank\" rel=\"noreferrer noopener\">ClickFix<\/a>&#8221; instructions.<\/p>\n\n\n\n<p>These instructions guide victims to press Win+R and paste a PowerShell command, potentially compromising their systems with <a href=\"https:\/\/cybersecuritynews.com\/chatgpt-powered-malware-analysis\/\" target=\"_blank\" rel=\"noreferrer noopener\">malware<\/a>.<\/p>\n\n\n\n<p>Mobile visitors, meanwhile, are prompted to download an APK file named &#8220;indiapost.apk&#8221; that requests extensive permissions to access sensitive data.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhApALi81rcdIJifSRLp-9gPlgEd7XNf5xWkedX__uQu31licUea62l542qwAJ3KsvxAlHgnNTq5riGyZVsxmJYFw6ZySoaebR-2fk-amcC4aly6lbzLCuVpHbo7TyVu-DlP_sxy0GIZYx0O5A8GmP5WAauAyBRvuFAzXiF9Tkx94oTbAMgPhHqaVe4mxQ\/s16000\/Malicious%20Indiapost.apk%20(Source%20-%20Cyfirma).webp\" alt=\"\" \/><figcaption class=\"wp-element-caption\">Malicious Indiapost.apk (Source &#8211; Cyfirma)<\/figcaption><\/figure><\/div>\n\n\n<p>Cyfirma researchers <a href=\"https:\/\/www.cyfirma.com\/research\/turning-aid-into-attack-exploitation-of-pakistans-youth-laptop-scheme-to-target-india\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">identified<\/a> the campaign in March 2025 during routine threat monitoring activities.<\/p>\n\n\n\n<p>Their analysis revealed metadata suggesting the attack originated from Pakistan-based threat actors, specifically APT36 (also known as Transparent Tribe), a group with a history of targeting Indian entities since at least 2013.<\/p>\n\n\n\n<p>Technical examination of the PDF&#8217;s metadata showed it was created in October 2024 within Pakistan&#8217;s time zone (+5:00), with the author labeled as &#8220;PMYLS&#8221; &#8211; an abbreviation for Pakistan&#8217;s Prime Minister Youth Laptop Scheme.<\/p>\n\n\n\n<p>This evidence, combined with the tactics employed, led researchers to attribute the campaign to APT36 with moderate confidence.<\/p>\n\n\n\n<p>The attackers employed strategic infrastructure, including IP address 88[.]222[.]245[.]211, which resolves to the suspicious domain email[.]gov[.]in[.]gov-in[.]mywire[.]org, a known tactic of Pakistan-based APT groups attempting to impersonate Indian government entities.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Infection Mechanism Analysis<\/strong><\/h2>\n\n\n\n<p>The campaign&#8217;s infection technique is particularly notable for its multi-platform approach.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguWqzACl96kxW6AUmeqbYJO4sI3gUkHA97GaCh5AWVzyYWZg8efA1qzNGy5sAWtp0LemrehgFzSSdq1DrVjXEZfFfx4a0JTwGTAl0Qu8EIjYbhp6meu8vUw8y4DMsGKrVoEWG28nrDFKnkMqIbgAMBSN_54sRaGhiKBMP0aj5PRmagdusyXfD8yEXJiZ8\/s16000\/Attack%20Chain%20(Source%20-%20Cyfirma).webp\" alt=\"\" \/><figcaption class=\"wp-element-caption\">Attack Chain (Source &#8211; Cyfirma)<\/figcaption><\/figure><\/div>\n\n\n<p>The website&#8217;s HTML code contains a <a href=\"https:\/\/cybersecuritynews.com\/javascript-attacks-targeting\/\" target=\"_blank\" rel=\"noreferrer noopener\">JavaScript<\/a> function that detects whether visitors are using mobile or desktop devices and serves appropriate content accordingly:-<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgk_DpCZ8iROnPwy4vqhfY6E3Tmk_Z3IvmtV1pzusr_Wo6Rd30jZPloLcjUlI77qGQ-lmM4YqiqOGvGQ5o3QNtW5DUCB73pIPj7xgrwA6Zrpfqoz7zcOVPNBH1XXakcQ1DzdVEq0s2VAhMHc2ohkSE5RJV0Mq_8DH6Bm2qGYWOsXOJYpB3XQuR46Eb2S-0\/s16000\/HTML%20code%20contains%20a%20JavaScript%20function%20(Source%20-%20Cyfirma).webp\" alt=\"\" \/><figcaption class=\"wp-element-caption\">HTML code contains a JavaScript function (Source &#8211; Cyfirma)<\/figcaption><\/figure><\/div>\n\n\n<pre class=\"wp-block-code\"><code>function detectDevice() {\n  const isMobile = \/iPhone|iPad|iPod|Android\/.test(navigator.userAgent);\n  if (isMobile) {\n    dialogTitle.textContent = \"Get Our App\";\n    actionButton.href = \"https:\/\/postindia.site\/download\/indiapost.apk\";\n  } else {\n    dialogTitle.textContent = \"Download Tracking Information\";\n    actionButton.href = \"https:\/\/drive.usercontent.google.com\/download?id=1RSILmV3HDR6APXKWEPXrg2MRP1d2xwmb&amp;export=download\";\n  }\n}<\/code><\/pre>\n\n\n\n<p>The Android malware demonstrates sophisticated evasion tactics by changing its icon to mimic a Google Accounts app and employs persistence mechanisms through the BootReceiver function.<\/p>\n\n\n\n<p>It requests numerous permissions including contacts access, <a href=\"https:\/\/cybersecuritynews.com\/google-to-pay-391-million-fine-for-silently-tracking-users-location\/\" target=\"_blank\" rel=\"noreferrer noopener\">location tracking<\/a>, and clipboard monitoring, while implementing techniques to bypass battery optimization restrictions to maintain continuous operation.<\/p>\n\n\n\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 91%,rgb(169,184,195) 100%)\"><strong><code><strong><code>Investigate Real-World Malicious Links &amp; Phishing Attacks With\u00a0<strong>Threat Intelligence Lookup<\/strong>\u00a0-\u00a0<a href=\"https:\/\/intelligence.any.run\/plans?utm_source=csn&amp;utm_medium=article&amp;utm_campaign=enrichment&amp;utm_content=plans&amp;utm_term=180325\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Try for Free<\/a><\/code><\/strong><\/code><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers have uncovered a sophisticated attack campaign leveraging a fraudulent website that impersonates the Indian Post Office to deliver malware to both Windows and Android users. The fake website, hosted at postindia[.]site, employs device detection techniques to serve tailored malicious payloads based on the victim&#8217;s operating system, demonstrating the threat actor&#8217;s technical sophistication and [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":97435,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,9],"tags":[144,151],"class_list":{"0":"post-97413","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-cyber-attack","9":"tag-cyber-attack","10":"tag-cyber-security-news"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.7.1 (Yoast SEO v25.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows &amp; Android Users<\/title>\n<meta name=\"description\" content=\"Researchers have uncovered a sophisticated attack campaign leveraging a fraudulent website that impersonates the Indian Post Office.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows &amp; Android Users\" \/>\n<meta property=\"og:description\" content=\"Researchers have uncovered a sophisticated attack campaign leveraging a fraudulent website that impersonates the Indian Post Office.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-27T08:28:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-27T08:28:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp\" \/><meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tushar Subhra Dutta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tushar Subhra Dutta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows & Android Users","description":"Researchers have uncovered a sophisticated attack campaign leveraging a fraudulent website that impersonates the Indian Post Office.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/","og_locale":"en_US","og_type":"article","og_title":"Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows &amp; Android Users","og_description":"Researchers have uncovered a sophisticated attack campaign leveraging a fraudulent website that impersonates the Indian Post Office.","og_url":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-03-27T08:28:35+00:00","article_modified_time":"2025-03-27T08:28:39+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp","type":"","width":"","height":""},{"width":1600,"height":900,"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp","type":"image\/jpeg"}],"author":"Tushar Subhra Dutta","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp","twitter_creator":"@The_Cyber_News","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Tushar Subhra Dutta","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/"},"author":{"name":"Tushar Subhra Dutta","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c"},"headline":"Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows &amp; Android Users","datePublished":"2025-03-27T08:28:35+00:00","dateModified":"2025-03-27T08:28:39+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/"},"wordCount":374,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/#primaryimage"},"thumbnailUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber attack","cyber security news"],"articleSection":["Cyber Security News","Cyberattack News"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/","url":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/","name":"Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows & Android Users","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/#primaryimage"},"thumbnailUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-03-27T08:28:35+00:00","dateModified":"2025-03-27T08:28:39+00:00","description":"Researchers have uncovered a sophisticated attack campaign leveraging a fraudulent website that impersonates the Indian Post Office.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/#primaryimage","url":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/pakistan-apt-hackers-create-weaponized-indiapost-website\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows &amp; Android Users"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World&#039;s #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c","name":"Tushar Subhra Dutta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","caption":"Tushar Subhra Dutta"},"description":"Tushar is a senior cybersecurity and breach reporter. He specializes in covering cybersecurity news, trends, and emerging threats, data breaches, and malware attacks. With years of experience, he brings clarity and depth to complex security topics.","url":"https:\/\/cybersecuritynews.com\/author\/tushar\/"}]}},"jetpack_featured_media_url":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEguC6JEfciws4yZzLCrauo7FZHkuNSAKRlC9uUGtHwc0AUhXDMWhyphenhyphen8WfRaF3OXGX5Y4tkTBbAywcjuJ6ILAKau09l1tp5p9xh487jOfBOO9B2-eRq752g55DC-t7qLxyJjgMldAQNDyk158an-okVbON2G5-VOf7susq72mZJX_nA0c3IfCYDLQ6d0gsjk\/s16000\/Pakistan%20APT%20Hackers%20Create%20Weaponized%20IndiaPost%20Website%20to%20Attack%20Windows%20&%20Android%20Users.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/97413","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=97413"}],"version-history":[{"count":1,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/97413\/revisions"}],"predecessor-version":[{"id":97434,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/97413\/revisions\/97434"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/97435"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=97413"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=97413"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=97413"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}