SideCopy

MISP
Tipo:
Unknown
Paese:
PK
Prima attivita:
Unknown
Dettagli:

[SideCopy](https://attack.mitre.org/groups/G1008) is a Pakistani threat group that has primarily targeted South Asian countries, including Indian and Afghani government personnel, since at least 2019. [SideCopy](https://attack.mitre.org/groups/G1008)'s name comes from its infection chain that tries to mimic that of [Sidewinder](https://attack.mitre.org/groups/G0121), a suspected Indian threat group.(Citation: MalwareBytes SideCopy Dec 2021)

MITRE ATT&CK: View on MITRE
Tecniche Utilizzate (16)
ID ATT&CK Tattiche
T1016 System Network Configuration Discovery -
T1036.005 Match Legitimate Resource Name or Location -
T1059.005 Visual Basic -
T1082 System Information Discovery -
T1105 Ingress Tool Transfer -
T1106 Native API -
T1204.002 Malicious File -
T1218.005 Mshta -
T1518 Software Discovery -
T1518.001 Security Software Discovery -
T1566.001 Spearphishing Attachment -
T1574.001 DLL -
T1584.001 Domains -
T1598.002 Spearphishing Attachment -
T1608.001 Upload Malware -
Riferimenti (6)
Malware Utilizzato (2)
Action RAT
other
AuTo Stealer
other
Metadata
ID: 341
Created: 13/01/2026 17:48
Updated: 21/04/2026 16:00