New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure

A newly discovered backdoor called PATCHCORD is being used in an ongoing campaign targeting Afghan telecom providers and critical infrastructure organizations in South Asia. The backdoor is a compiled C/C++ implant that is delivered through sector-specific lures. These lures include fake VPN installers that impersonate Afghan Telecom. The campaign's targets suggest a focus on specific geographic regions and industries. The backdoor was identified by the Acronis Threat Research Unit. Its discovery highlights the use of tailored attacks against particular sectors and regions.