SideCopy
SideCopy is a Pakistani threat group that has primarily targeted South Asian countries, including Indian and Afghani government personnel, since at least 2019. SideCopy's name comes from its infection chain that tries to mimic that of Sidewinder, a suspected Indian threat group.
- ATT&CK ID
- G1008
- Origin
- Pakistan
- Techniques
- 15
- Tools
- 2
Techniques
Reconnaissance
Resource Development
Compromise InfrastructureStage Capabilities
Initial Access
Execution
Command and Scripting InterpreterNative APIUser ExecutionHijack Execution Flow
Stealth
MasqueradingSystem Binary Proxy ExecutionHijack Execution Flow
Discovery
System Network Configuration DiscoverySystem Information DiscoverySoftware DiscoverySystem Location Discovery
Command and Control
Software
Action RAT · AuTo Stealer