Operation RapidRust: APT36 Hid Its C2 Inside GitHub

APT36, a group Zscaler calls Pakistan-nexus, spent August 2026 running four new malware families against Indian and Afghan government networks. The command-and-control infrastructure was a private Git