Threat actor · G1008

SideCopy

UnattributedNo public state or group attribution on record

SideCopy is a Pakistani threat group that has primarily targeted South Asian countries, including Indian and Afghani government personnel, since at least 2019. SideCopy's name comes from its infection chain that tries to mimic that of Sidewinder, a suspected Indian threat group.

MITRE ATT&CK Techniques

T1016 T1036.005 T1059.005 T1082 T1105 T1106 T1204.002 T1218.005 T1518 T1518.001 T1566.001 T1574.001 T1584.001 T1598.002 T1608.001 T1614

Associated Malware

Action RATAuTo Stealer

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.