Talos Takes Ep. #69: Our armadillo in shining armor
Summary: Asheer Maholtra and colleagues at Cisco Talos have been tracking Operation: Armor Piercer, a campaign targeting military contractors and government agencies on the Indian subcontinent with lure documents themed as a popular regional multi-factor authentication app. Maholtra discusses the campaign's similarities to regional threat actors SideCopy and Transparent Tribe, and offers advice to MFA users on verifying they are accessing the right apps, notifications and messages.
Why it matters: The campaign turns the MFA app itself into the lure, so the control organizations rely on to stop credential theft becomes the entry point attackers imitate - aimed specifically at military contractors and government agencies.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026