OTX Threat: PATCHCORD: New malware cluster targets Afghan telecom and South Asian critical infrastructure

A previously undocumented custom backdoor called PATCHCORD has been identified targeting Afghan telecom providers and South Asian critical infrastructure organizations. The C/C++ implant is delivered through sector-specific lures including fake VPN installers impersonating Afghan Telecom and telecom management tools. Infrastructure analysis uncovered SHEETCORD, a Go-based implant using Google Shee CVEs: CVE-2021-4034, CVE-2024-6387 Sectors: Telecommunications, Government, Defense