Transparent Tribe Upgrades Its Cyber Arsenal for Afghanistan While India Proves a Much Harder Target + Video

Listen to this Post

Featured ImageA New Chapter in a Long-Running Cyber Espionage Campaign

Cyber espionage rarely announces itself with dramatic explosions or obvious signs of compromise. More often, it begins with something deceptively ordinary: an email, a document, a familiar-looking shortcut, or a website that appears to belong to a trusted organization. Behind that routine interaction, however, a state-linked threat actor can quietly establish persistence, collect intelligence, and use stolen information to reach deeper into an organization.

That pattern is now visible again in a campaign attributed to Transparent Tribe, also known as APT36, a Pakistani threat actor long associated by researchers with cyber espionage against India and Afghanistan. The group has refreshed its malware arsenal with new tools, including the Patchcord and Sheetcord backdoors, while continuing to rely on carefully crafted social engineering.

The campaign offers an interesting contrast. In Afghanistan, several organizations appear to have been successfully compromised, including government and telecommunications targets. In India, meanwhile, the same actor appears to have faced substantially stronger defenses, with no confirmed successful compromises reported from the campaign described by researchers.

The difference is important because it demonstrates a fundamental truth about modern cybersecurity: an attacker’s sophistication matters, but the victim’s security maturity can matter just as much.

Transparent Tribe Remains One of

Transparent Tribe has spent years conducting cyber espionage operations against organizations in South Asia. Its targeting history has repeatedly included government institutions, military organizations, and other strategically important entities in India and Afghanistan.

Researchers have long assessed the group as being connected to Pakistani state interests because of its persistent focus on regional government and military targets.

Its latest activity suggests that the organization is continuing that mission while adapting its malware and delivery techniques.

The objective is not necessarily to cause immediate disruption. Instead, the apparent goal is intelligence collection: obtaining documents, monitoring communications, profiling employees, and potentially using compromised machines as stepping stones into larger networks.

The Campaign Has Been Active Since Late 2025

Researchers tracking the activity believe the current campaign dates back to at least December 2025.

The operation reportedly intensified around May 2026 and has remained active since then.

That extended timeline is significant. Long-running campaigns allow attackers to test their tooling, observe which defensive technologies detect them, and refine their phishing techniques based on the results.

Rather than relying on a single malware family, Transparent Tribe appears to be maintaining multiple tools that can be selected depending on the target environment.

Afghanistan Has Become a Particularly Attractive Target

Recent victims in Afghanistan reportedly include government organizations, telecommunications companies, a subsidiary of an international organization, a smaller private business, and individual users.

One confirmed compromise involved an IT officer associated with the Khost branch of Afghan Telecom, or AFTEL.

Once inside the

That type of access can be more valuable than simply stealing a few documents.

Stolen Information Can Become the Next Attack

One of the most concerning elements of the campaign is how stolen information can apparently be reused for additional social engineering.

After compromising an employee, attackers can study documents, names, organizational structures, communications, and internal workflows.

They can then create convincing decoy Excel files or other documents designed specifically for the victim’s colleagues.

This creates a dangerous feedback loop:

Phishing leads to compromise.

Compromise produces intelligence.

Intelligence improves the next phishing campaign.

The improved phishing campaign creates additional compromises.

This is how a relatively simple initial intrusion can evolve into a much broader organizational compromise.

Transparent Tribe Is Also Looking Toward India

India appears to have been another major target.

The threat actor reportedly prepared phishing material impersonating resources associated with several Indian government institutions and agencies.

Targets included organizations connected with defense, foreign affairs, national information infrastructure, and the Indian Air Force.

The preparation itself demonstrates that Transparent Tribe is willing to conduct extensive reconnaissance before attempting an intrusion.

Yet there is an important distinction between targeting an organization and successfully compromising it.

Researchers have not confirmed successful compromises among the Indian targets described in this campaign.

Why India May Be Blocking the Same Attack

The contrast between Afghanistan and India may reveal more about defensive maturity than about Transparent Tribe’s capabilities.

Organizations with stronger endpoint detection, network monitoring, threat intelligence, email filtering, identity protection, and incident-response capabilities can make familiar attack techniques significantly harder to execute.

A phishing campaign does not automatically become successful simply because the email reaches an employee.

The attacker still needs execution, persistence, command-and-control communication, and access to useful information.

Every defensive layer creates another opportunity for the attack to fail.

Patchcord: The New Backdoor at the Center of the Campaign

One of the most notable pieces of malware connected to the campaign is Patchcord, a newly documented C++ implant.

Patchcord includes relatively straightforward surveillance and reconnaissance functions.

It can fingerprint the infected host, enumerate processes, and execute code directly in memory.

The in-memory execution capability is particularly important because attackers increasingly attempt to minimize the number of suspicious files written to disk.

In-Memory Execution Raises the Detection Challenge

Traditional antivirus systems have historically relied heavily on identifying malicious files.

Modern endpoint detection systems, however, increasingly monitor behavior rather than simply looking for known malware signatures.

Patchcord’s ability to execute code in memory therefore fits a broader trend in malware development.

Attackers want fewer obvious artifacts.

Defenders want visibility into what processes are doing after execution.

That creates a constant battle between stealth and behavioral detection.

Patchcord Also Looks for Sandboxes

A variant of Patchcord observed earlier in the year reportedly included checks designed to determine whether it was operating inside a virtual machine or sandbox.

Sandbox detection is a common anti-analysis technique.

Security researchers frequently execute suspicious programs in controlled environments so they can observe their behavior safely.

If malware realizes that it is being analyzed, it can change its behavior, stop executing, or deliberately appear harmless.

That can make automated analysis less effective.

The Strange Weakness in

Patchcord’s anti-analysis capabilities sound relatively modern.

Its persistence mechanism, however, is surprisingly old.

The malware can reportedly modify browser desktop shortcuts so that the shortcut launches the malicious component before starting the intended browser.

To the user, almost nothing appears to change.

The browser still opens normally.

The icon still looks familiar.

The user may have no reason to suspect anything is wrong.

But behind that normal interaction, the malware gets another opportunity to execute.

Shortcut Hijacking Is Old, But Still Dangerous

Shortcut manipulation is not a revolutionary technique.

It has been used by malware for years.

That makes its appearance in a modern APT campaign particularly interesting.

The lesson is not that Transparent Tribe has invented a sophisticated persistence mechanism.

The lesson is that sophisticated attackers do not necessarily need sophisticated techniques when simpler ones work.

If a target has weak endpoint controls, an old technique may be more useful than a complex new exploit.

Sheetcord Takes a More Conventional Approach

Transparent Tribe also appears to use Sheetcord, a Go-based malware family described as an evolution of Patchcord.

Unlike

Its command-and-control traffic also attempts to blend into legitimate services by using Google Sheets as part of its communications infrastructure.

This is an example of an increasingly common malware strategy: hiding malicious communications inside services that organizations already trust.

Legitimate Cloud Services Can Become an

Security teams routinely monitor suspicious domains and known malicious infrastructure.

Monitoring becomes more complicated when malware communicates through legitimate cloud platforms.

Blocking an entire major cloud service is obviously impractical.

As a result, defenders need to distinguish between legitimate use and malicious behavior.

That requires stronger behavioral monitoring, identity controls, application telemetry, and network analytics.

Sheetcreep Adds Remote Access Capabilities

Another tool associated with the campaign is a remote access Trojan called Sheetcreep.

A RAT gives an attacker much broader control over an infected system.

Depending on its configuration, a RAT can potentially support surveillance, command execution, file collection, and other remote operations.

This means Transparent Tribe is not depending on one malware family.

Instead, it appears to have a toolbox that can be adapted to different circumstances.

HackerAI Introduces Another Modern Twist

Acronis researchers also identified a malware framework called HackerAI.

The framework reportedly uses GitHub Gist as part of its command-and-control infrastructure.

More interestingly, researchers believe the malware may have been created with assistance from an AI coding tool.

If accurate, this would fit into a rapidly developing trend in which cybercriminals and state-linked actors experiment with generative AI to accelerate malware development.

AI Does Not Automatically Make Malware Sophisticated

The phrase “AI-generated malware” can sound more frightening than it actually is.

Artificial intelligence can help produce code faster, explain programming concepts, translate code between languages, and generate repetitive components.

But AI assistance does not automatically turn an inexperienced programmer into an elite malware developer.

In some cases, AI-generated code can actually introduce obvious weaknesses or unusual patterns.

The more important development is productivity.

An attacker who previously needed several days to prototype a tool may be able to produce an experimental version much faster.

Afghanistan’s Security Maturity May Be the Critical Factor

The campaign appears to demonstrate a troubling imbalance.

Attackers do not always need zero-days or highly sophisticated exploits if the target’s security infrastructure is weak.

Basic phishing, credential theft, shortcut manipulation, and poorly concealed persistence can be enough.

That is particularly dangerous for organizations managing sensitive government or telecommunications information.

A nation’s cybersecurity resilience is therefore not determined only by the quality of its elite security teams.

It depends heavily on how consistently security controls are deployed across ordinary organizations.

India Demonstrates the Value of Defensive Maturity

The Indian side of the campaign presents a different picture.

According to the researchers described in the original report, Indian defenses were significantly more mature.

Even when Transparent Tribe prepared convincing infrastructure and phishing material for government organizations, successful compromise was not confirmed.

India’s response reportedly included blocking known attacker infrastructure.

That may sound basic, but basic defenses become extremely powerful when they are deployed consistently and quickly.

Infrastructure Blocking Can Be Highly Effective

Threat intelligence does not always require complicated artificial intelligence systems.

Sometimes defenders already know enough about an

Malicious domains, IP addresses, hashes, email indicators, URLs, and other artifacts can become practical defensive controls.

The challenge is speed.

If defenders identify infrastructure but take days or weeks to block it, the attacker has plenty of time to adapt.

If the infrastructure is blocked rapidly, the cost of the campaign rises.

Deep Analysis

Understanding the Attack Chain

A useful way to understand Transparent

Initial reconnaissance → phishing → execution → persistence → command and control → data collection → lateral movement → additional phishing.

Each stage creates opportunities for defenders to intervene.

Stopping the attack at the email gateway is preferable to detecting it after the attacker has established persistence.

Check Browser Shortcuts for Unexpected Changes

On Windows systems, administrators can inspect browser shortcut properties and compare them against expected configurations.

For example, defenders can review shortcut targets using PowerShell:

Get-ChildItem "$env:USERPROFILE\Desktop.lnk" |
ForEach-Object {
$_.FullName
}

Security teams should pay particular attention to shortcuts whose target paths or arguments differ from the organization’s standard configuration.

Inspect Shortcut Metadata

Administrators can use PowerShell to examine shortcut targets through the Windows Shell COM interface:

$shell = New-Object -ComObject WScript.Shell
Get-ChildItem "$env:USERPROFILE\Desktop.lnk" | ForEach-Object {
$shortcut = $shell.CreateShortcut($<em>.FullName)
[PSCustomObject]@{
Shortcut = $</em>.FullName
Target = $shortcut.TargetPath
Arguments = $shortcut.Arguments
}
}

This can help identify shortcuts that launch unexpected executables or scripts before opening a legitimate browser.

Search for Suspicious Startup Entries

Because Sheetcord reportedly uses Windows startup persistence, defenders should examine startup locations and related registry entries.

A basic PowerShell check can include:

Get-CimInstance Win32_StartupCommand |
Select-Object Name, Command, Location, User

Unexpected startup commands deserve investigation, particularly when they reference temporary directories, user-writable folders, scripts, or unknown executables.

Examine Suspicious Processes

Patchcord’s process enumeration and in-memory execution make process telemetry particularly valuable.

Defenders can begin with:

Get-Process |
Select-Object Id, ProcessName, Path

This command alone is not an EDR replacement, but it can help investigators identify unusual processes during initial triage.

Investigate Network Connections

Security teams should also examine outbound connections from unusual processes.

A basic Windows command is:

Get-NetTCPConnection |
Where-Object {$_.State -eq "Established"} |
Select-Object LocalAddress, LocalPort, RemoteAddress, RemotePort, OwningProcess

The output can then be correlated with process information and endpoint telemetry.

Monitor Cloud-Based Command and Control

Organizations should not automatically trust traffic simply because it is destined for Google, Microsoft, GitHub, or another major cloud provider.

Security monitoring should instead ask a more useful question:

Why is this particular process communicating with this particular service?

A browser connecting to Google Sheets is normal.

An unknown executable repeatedly communicating with a Google-hosted resource is a very different event.

Hunt for GitHub Gist Abuse

Because HackerAI reportedly uses GitHub Gist for C2, organizations can investigate endpoints that unexpectedly access Gist infrastructure.

For example:

Get-NetTCPConnection |
Where-Object {$_.RemotePort -eq 443} |
Select-Object RemoteAddress, RemotePort, OwningProcess

This should be correlated with DNS, proxy, browser, and EDR telemetry rather than treated as a standalone indicator.

Strengthen Email Security

The phishing component remains one of the easiest places to disrupt this campaign.

Organizations should inspect:

Newly registered lookalike domains

Government impersonation

Fake telecom documents

Unexpected Excel attachments

Files requesting macro or script execution

External sender anomalies

Links leading to credential harvesting pages

Email security becomes much stronger when combined with employee reporting mechanisms and rapid incident response.

Harden Microsoft Office

Organizations should restrict unnecessary macro execution and scripting from documents received through email.

Application control can also prevent unknown binaries from executing in user-writable locations.

This is particularly important because attackers often rely on the user’s workstation as the initial execution environment.

Apply Least Privilege

Compromising one ordinary employee should not automatically give an attacker access to an entire organization.

Least-privilege access limits what stolen credentials and compromised workstations can reach.

Administrative privileges should be separated from everyday accounts.

Sensitive systems should require stronger authentication and additional access controls.

Protect Identity, Not Just Endpoints

Modern espionage campaigns increasingly combine malware with identity theft.

Even if an organization blocks Patchcord, attackers may still attempt to steal passwords, session tokens, cookies, or authentication credentials.

Strong multifactor authentication, phishing-resistant authentication, conditional access, and privileged-access management can significantly reduce the impact of a successful phishing attempt.

Build Detection Around Behavior

Hash-based malware detection is useful, but it is not enough.

Attackers can modify binaries, compile new variants, and change infrastructure.

Behavior is harder to disguise completely.

Security teams should watch for combinations such as:

Unexpected shortcut modification + suspicious executable + outbound connection + unusual persistence.

Individually, each event may look harmless.

Together, they can reveal a much stronger signal.

The Most Important Lesson From Patchcord

Patchcord’s unusual combination of modern and old techniques is perhaps the most revealing part of the campaign.

It uses in-memory execution and anti-analysis techniques.

Then it relies on shortcut manipulation, a technique defenders have known about for years.

That combination illustrates an important cybersecurity principle:

Attack sophistication should always be measured against the target’s defenses.

A technique does not need to be new to be effective.

Why Reconnaissance Matters So Much

Transparent Tribe appears to conduct extensive reconnaissance before deploying its tools.

The group reportedly studies the software, organizations, and security products used by its targets.

This allows attackers to select techniques based on the environment.

The resulting attack may look surprisingly simple because the attacker has already determined that simple techniques are sufficient.

Security Teams Should Think Like Attackers

Defenders should ask the same questions attackers ask.

What applications are employees using?

Which services are trusted?

Which systems are poorly monitored?

Which employees have privileged access?

Which cloud services can communicate externally?

Which persistence mechanisms would remain unnoticed?

Answering those questions before an attacker does can dramatically reduce the attack surface.

What Undercode Say:

The Real Story Is Not Just About Malware

The biggest lesson from Transparent

The deeper story is about the enormous difference between targets with weak security foundations and organizations that have mature defensive processes.

Old Techniques Still Work

Cybersecurity sometimes focuses too heavily on zero-days and sophisticated exploits.

Patchcord demonstrates why that can be misleading.

Shortcut hijacking is old.

Phishing is old.

Startup persistence is old.

Yet these techniques remain useful when defenses are inconsistent.

Complexity Is Not Always Strength

An attacker can possess sophisticated malware and still use basic persistence.

That is not necessarily incompetence.

It can be efficiency.

If a simple technique works, there is little reason for an attacker to introduce unnecessary complexity.

Defense Maturity Changes the Equation

The reported difference between Afghanistan and India is particularly important.

The same threat actor can appear extremely dangerous in one environment and considerably less effective in another.

Security maturity changes the economics of an attack.

Attackers Need Reliability

Nation-state actors do not necessarily need the most technically impressive malware.

They need malware that works.

They need infrastructure that survives.

They need social engineering that convinces users.

They need access that remains useful.

Patchcord Shows a Hybrid Approach

Patchcord combines newer defensive-evasion ideas with an older persistence technique.

This hybrid approach may actually be more practical than a completely novel malware architecture.

Cloud Services Are Becoming Part of the Battlefield

Using Google Sheets or GitHub infrastructure for command and control creates a difficult defensive problem.

Blocking legitimate cloud services is rarely practical.

Behavioral detection therefore becomes increasingly important.

AI Could Accelerate Malware Development

HackerAI is particularly interesting because of the possibility that AI coding tools contributed to its development.

Even if the malware itself is not dramatically more sophisticated, faster development can benefit attackers.

Speed May Matter More Than Intelligence

AI-assisted coding could allow attackers to experiment with multiple malware variants quickly.

That means defenders may eventually face more short-lived tools rather than a few stable malware families.

Detection Must Become More Adaptive

Security products cannot depend entirely on known samples.

A constantly changing malware ecosystem requires behavioral analytics and contextual detection.

Phishing Remains the Human Weak Point

No matter how advanced endpoint security becomes, convincing users to open something malicious remains an attractive strategy.

The human layer therefore continues to be critical.

Intelligence Gathering Makes Phishing Worse

Once attackers steal internal documents and communications, they can create more believable lures.

That makes the first compromise disproportionately valuable.

Lateral Movement Is the Real Danger

A single compromised workstation is bad.

A compromised workstation used to reach dozens of employees is far worse.

Organizations should therefore treat every endpoint as a potential gateway into the broader network.

Government Agencies Need Special Protection

Government networks contain information that can remain strategically valuable for years.

Even apparently minor information can help an intelligence operation build a larger picture.

Telecommunications Targets Are Especially Sensitive

Telecommunications organizations provide attackers with valuable information about infrastructure, employees, customers, and communications patterns.

That makes them attractive intelligence targets.

Endpoint Controls Can Stop Old Techniques

The good news is that several techniques described in the campaign are detectable.

Shortcut modification, suspicious startup entries, unusual process behavior, and unexpected network connections can all produce valuable signals.

Detection Must Be Followed by Response

Identifying malicious behavior is only half the job.

Organizations must have procedures for isolating endpoints, disabling accounts, blocking infrastructure, collecting evidence, and determining whether lateral movement occurred.

Threat Intelligence Has Practical Value

Known Transparent Tribe infrastructure can become useful defensive intelligence.

Blocking known indicators can stop repeated attempts.

But Blocking Alone Is Not Enough

Attackers can replace domains and infrastructure.

Organizations therefore need layered defenses rather than a permanent blacklist.

Zero Trust Helps Reduce Damage

Assuming that every user and endpoint must continually prove trust limits the potential impact of a compromised machine.

MFA Is Essential

Strong authentication can make stolen passwords considerably less useful.

Phishing-resistant authentication is particularly valuable against credential theft.

Application Control Deserves More Attention

If employees cannot execute arbitrary unknown binaries, many malware campaigns become significantly harder.

Organizations Should Monitor Shortcuts

Desktop shortcuts are often ignored because they appear harmless.

They should not be.

Unexpected modifications deserve investigation.

Startup Persistence Should Be Audited

Attackers need persistence.

Defenders should therefore continuously monitor startup mechanisms.

Cloud Traffic Needs Context

A connection to a trusted cloud provider is not automatically safe.

The identity of the process generating the connection matters.

Security Maturity Is an Organizational Property

A country or company cannot become resilient simply by purchasing one expensive security product.

People, processes, technology, training, and response capabilities must work together.

The Campaign Is a Warning

Transparent

That is perhaps the most frustrating part of cybersecurity.

The Problem Is Often Implementation

Security teams frequently know what they should monitor.

The challenge is implementing those controls everywhere and maintaining them consistently.

Attackers Exploit Gaps

A single neglected endpoint can become an entry point.

A single reused password can become an identity compromise.

A single unmonitored cloud connection can become a C2 channel.

Prepared Organizations Can Force Attackers to Work Harder

Strong defenses do not make an organization invincible.

They increase the

That alone can change the outcome.

Afghanistan and India Offer a Valuable Contrast

The reported campaign illustrates how dramatically security maturity can influence the success of an APT.

The attacker may remain the same.

The target environment changes.

Cybersecurity Is Ultimately a Race

Attackers continuously test new techniques.

Defenders continuously improve controls.

Neither side stays still.

The Winning Strategy Is Layered Defense

Email filtering, endpoint detection, identity security, network monitoring, application control, threat intelligence, and incident response should reinforce each other.

The Human Element Still Matters

Employees remain both a potential vulnerability and an important defensive sensor.

A well-trained employee who reports suspicious activity can stop an intrusion early.

The Future Will Be More Automated

AI-assisted development may make attacker experimentation faster.

Defensive automation will therefore become equally important.

The Biggest Takeaway

Transparent

It is about making every stage of an attack difficult.

When the first phishing email fails, the attacker loses.

When the malware is detected, the attacker loses.

When persistence is blocked, the attacker loses.

When stolen credentials cannot be reused, the attacker loses.

And when lateral movement is contained, a single compromised endpoint does not become a national security incident.

✅ Transparent Tribe Has a Long History of Targeting India and Afghanistan

The characterization of Transparent Tribe, or APT36, as a South Asia-focused espionage actor is consistent with longstanding threat intelligence reporting. Its campaigns have repeatedly targeted government, military, and related organizations.

✅ Patchcord Uses a Mixture of Stealth and Conventional Techniques

The article’s description of Patchcord’s in-memory execution, anti-analysis capabilities, and shortcut-based persistence is internally consistent with the technical reporting summarized in the source material.

✅ Shortcut Hijacking Is an Established Malware Technique

Manipulating Windows shortcuts is an old persistence or execution technique. Its appearance in a newer APT campaign does not make the technique new, but it demonstrates that older methods can remain effective.

❌ “Sophisticated APT” Does Not Mean Every Technique Is Sophisticated

Calling Transparent Tribe a capable nation-state threat actor should not be interpreted as meaning every component of its toolkit is technically advanced. The campaign itself demonstrates a mixture of modern evasion and relatively basic persistence.

✅ AI-Assisted Malware Development Is a Growing Concern

The reported HackerAI example fits a broader cybersecurity trend in which threat actors experiment with AI coding tools. However, AI assistance should not automatically be equated with dramatically more capable malware.

Prediction

(+1) Attackers Will Continue Combining Old Tactics With AI-Assisted Development

The most likely evolution is not that every malware family suddenly becomes autonomous. Instead, attackers will use AI to accelerate reconnaissance, coding, debugging, phishing-content generation, and customization while continuing to rely on proven techniques.

(+1) Behavioral Detection Will Become More Important

As attackers rapidly modify malware, static indicators such as hashes and domains will become less reliable. Detection based on process behavior, persistence changes, identity anomalies, and unusual network activity will become increasingly valuable.

(+1) Cloud-Based C2 Will Receive Greater Defensive Attention

Using legitimate services for command and control is likely to remain attractive. Security teams will increasingly focus on application identity, process context, and anomalous usage rather than simply blocking entire cloud platforms.

(+1) Security Maturity Will Become an Even Bigger Differentiator

The contrast between successful attacks in weaker environments and unsuccessful attempts against better-prepared organizations is likely to become more pronounced.

(-1) Simple Persistence Techniques Will Not Disappear

It would be a mistake to assume that better malware automatically replaces older methods. Attackers will continue using basic techniques whenever they remain effective against a particular victim.

(-1) Government and Telecom Organizations Will Remain High-Value Targets

Organizations holding strategic information, communications data, and government records will continue attracting espionage campaigns. The key question will increasingly be whether defenders can detect the intrusion before intelligence collection expands into broader network access.

(+1) Layered Defense Can Make Transparent Tribe’s Campaigns Far More Expensive

The strongest conclusion from this campaign is also the most practical: organizations do not need to make every attack impossible. They need to make every stage difficult enough that the attacker cannot reliably complete the mission.

▶️ Related Video (78% Match):

🕵️‍📝Let’s dive deep and fact‑check.

🎓 Live Courses & Certifications:

Join Undercode Academy for Verified Certifications

🚀 Request a Custom Project:

Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands

References:

Reported By: www.darkreading.com
Extra Source Hub (Possible Sources for article):
https://www.twitter.com
Wikipedia
OpenAi & Undercode AI

Image Source:

Unsplash
Undercode AI DI v2

🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]

💬 Whatsapp | 💬 Telegram

📢 Follow UndercodeNews & Stay Tuned:

𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon | 📺Youtube