---
title: "Discussion on \"Operation RapidRust: APT36 Hid Its C2 Inside GitHub\" | Hashnode"
description: "Discussion on \"Operation RapidRust: APT36 Hid Its C2 Inside GitHub\". Transparent Tribe used private GitHub repositories for C2 and a removable-media tool that relies on a victim opening a shortcut."
url: "https://hashnode.com/posts/operation-rapidrust-apt36-rustyshade-github-c2/6aba51a6209206b2a09f45b0"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Operation RapidRust: APT36 Hid Its C2 Inside GitHub](https://404-founders.com/blog/operation-rapidrust-apt36-rustyshade-github-c2?utm_source=hashnode&utm_medium=feed)

Transparent Tribe used private GitHub repositories for C2 and a removable-media tool that relies on a victim opening a shortcut.

Sep 28 · 7 min read · 404-founders.com  
Updated Nov 1  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)
-   [#malware](https://hashnode.com/tag/malware)
-   [#apt](https://hashnode.com/tag/apt)

## Written by

[404 Founders](https://hashnode.com/@404-founders)

@404-founders · Bosnia and Herzegovina, Estonia

  
[View profile](https://hashnode.com/@404-founders)

Error-proof Cyber Solutions

Securing the digital frontier. Error-proof cyber solutions.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.