Sidewinder

Overview

Sidewinder is a suspected Indian threat actor group that has been active since at least 2012. They have been observed targeting government, military, and business entities throughout Asia, primarily focusing on Pakistan, China, Nepal, and Afghanistan.

Targets

Government · Military · Private sector

Regions

Afghanistan · China · Nepal · Pakistan

Capabilities

• Exploitation of public-facing / client applications — ATT&CK T1203

TTPs — 30 techniques across 9 tactics

Tools & malware (1)

Koadic

Reporting (3)

• A Global Perspective of the SideWinder APT — Hegel, T
• SideWinder APT Targets with futuristic Tactics and Techniques — Cyble
• APT Trends report Q1 2018 — Global Research and Analysis Team