HOMETHREATSOperation C-Major
APT / THREAT GROUP

Operation C-Major

🇵🇰Pakistan-attributed
1
campaigns
12
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Group targeting Indian Army or related assets in India, as well as activists and civil society in Pakistan. Attribution to a Pakistani connection has been made by TrendMicro and others.

Threat Analysis

Operation C-Major is a known-sophistication threat actor attributed to Pakistan, engaged in cyber operations with a primary motivation of unknown activity patterns.

Known Campaigns

Operation C-Major — Active Operations March 2026

Operation C-Major is a unknown-motivation threat actor attributed to PK. Group targeting Indian Army or related assets in India, as well as activists and civil society in Pakistan. Attribution to a Pakistani connection has been made by TrendMicro and others....

ACTIVEMEDIUM2026

External References

→http://documents.trendmicro.com/assets/pdf/Indian-military-personnel-targeted-by-information-theft-campaign-cmajor.pdf
→https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf
→https://www.amnesty.org/en/documents/asa33/8366/2018/en/
→https://www.crowdstrike.com/blog/adversary-of-the-month-for-may/
→https://unit42.paloaltonetworks.com/unit42-projectm-link-found-between-pakistani-actor-and-operation-transparent-tribe
→https://mkd-cirt.mk/wp-content/uploads/2018/08/20181009_3_1_M-Trends2018-May-2018-compressed.pdf
→https://nciipc.gov.in/documents/NCIIPC_Newsletter_July18.pdf
→https://cysinfo.com/cyber-attack-targeting-cbi-and-possibly-indian-army-officials
→https://s.tencent.com/research/report/669.html
→https://www.fireeye.com/blog/threat-research/2016/06/apt_group_sends_spea.html

Quick Facts

TypeAPT / Threat Group
Origin🇵🇰 Pakistan
Aliases12
SourceMalpedia

Also Known As

Operation C-MajorTMP.LapisGreen HavildarC-MajorEarth KarkaddanProjectMStorm-0156Mythic LeopardTransparent TribeAPT 36COPPER FIELDSTONEAPT36

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Operation C-Major