The backdoor persists by rewriting your browser shortcut — and it is aimed at India's government IT networks
2026-08-18World
Acronis attributes PATCHCORD to APT36 with moderate confidence. It arrives as a fake Afghan Telecom transport app, hides its console window, and survives reboots by hijacking the Chrome, Edge and Firefox shortcuts on the desktop.