PATCHCORD

New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure

Acronis Threat Research Unit has identified an ongoing cyberattack campaign delivering a new backdoor named PATCHCORD. The implant, written in C/C++, targets Afghan telecom providers and South Asian critical infrastructure organizations through sector-specific lures, including fake VPN installers impersonating Afghan Telecom. The campaign aims to establish unauthorized access for potential espionage and data exfiltration.