A threat actor based in Pakistan (APT36) has engaged in a sophisticated cyber-espionage campaign.