Afghan Finance Ministry Hit by Pakistan-Linked Cyberespionage

Afghanistan’s Ministry of Finance has fallen victim to a cyberespionage campaign allegedly orchestrated by actors linked to Pakistan. According to an investigation by Dark Reading, a malware strain dubbed Xeno RAT was deployed to infiltrate systems, leveraging classic techniques despite the country’s increasingly connected digital infrastructure.

Attack Relies on Proven Methods

The attackers employed standard TTPs (Tactics, Techniques, and Procedures), including phishing and exploitation of known vulnerabilities. While these methods lack sophistication, they proved effective against Afghanistan’s cybersecurity infrastructure, which experts describe as porous. The Xeno RAT, a remote access tool, grants attackers control over infected machines, enabling the exfiltration of sensitive data.

Structural Flaws Exposed

The incident highlights the persistent challenges Afghanistan faces in digital protection. Despite improved connectivity, limited resources and weak protocols leave critical gaps. Afghan authorities have not publicly addressed the breach, but the case underscores the urgent need to bolster cybersecurity amid a tense geopolitical climate.

---

Source: Dark Reading. Editorial synthesis assisted by AI — TechnoExpress.