// Google CloudMEDIUM
APT36 suspected in PATCHCORD espionage campaign targeting Afghan telecom and South Asian infrastructure. Attackers deliver PATCHCORD backdoor via fake VPN installers and abuse Google Sheets (via SHEETCORD implant) for command-and-control communication. Persistence achieved through browser shortcut hijacking.
// Get alerts for Google Cloud