Fortinet FortiGuard Labs

BITTER espionage group deploys new PapRAT backdoor via three infection chains targeting South Asian organizations

Fortinet FortiGuard Labs published research on Nov 2 saying it has tracked, over several months, a campaign targeting South Asian organizations that uses PowerShell scripts and a custom remote access trojan it calls PapRAT for persistent access, attributing it to BITTER with high confidence .