The Pakistani threat actor APT 36 used a two-factor authentication tool to deliver a new backdoor called Poseidon to Linux users working for Indian government agencies.