Pakistani threat actor APT 36 targeted Indian government entities with a spear-phishing campaign that used a new version of ReverseRAT malware. The attacks aimed to compromise Kavach, a two-factor authentication system the Indian government used to secure its systems.