SideCopy

Overview

SideCopy is a Pakistani threat group that has primarily targeted South Asian countries, including Indian and Afghani government personnel, since at least 2019. SideCopy's name comes from its infection chain that tries to mimic that of Sidewinder, a suspected Indian threat group.

TTPs — 16 techniques across 7 tactics

Tools & malware (2)

AuTo Stealer · Action RAT

Reporting (1)

• SideCopy APT: Connecting lures victims, payloads to infrastructure — Threat Intelligence Team