A Finance Ministry, a ZIP File, and a RAT: What the Afghanistan Targeting Pattern Reveals

A targeted spear-phishing operation tied to SideCopy highlights how local-language lures and remote-access malware can be used to probe high-value government revenue systems.