The Pakistani cyberespionage group APT 36 targeted workers at India’s Defense Research and Development Organization with the goal of stealing sensitive military secrets. The group used spear phishing for initial entry with emails that alleged they contained research material about military technologies sent as attachments, but which actually contained malware.