In July 2025, cybersecurity firm CYFIRMA revealed an ongoing phishing campaign by the Pakistani-linked group TransparentTribe, targeting Linux systems within Indian military and government organizations. This campaign utilizes sophisticated delivery mechanisms to deploy DeskRAT, a remote access trojan specifically designed for Linux environments like the Bharat Operating System Solutions (BOSS). By exploiting real-world events and political unrest, such as protests in Ladakh, the attackers aim to compromise sensitive data while adapting their techniques for stealth and effectiveness. The evolving nature of these cyber threats underscores the need for enhanced security measures within Indian defense establishments, highlighting the geopolitical significance of safeguarding national security interests against adaptive adversarial tactics.