SideCopy

· ATT&CK GroupG1008

Techniques

Software

Tactics

Aliases

Description

SideCopy is a Pakistani threat group that has primarily targeted South Asian countries, including Indian and Afghani government personnel, since at least 2019. SideCopy's name comes from its infection chain that tries to mimic that of Sidewinder, a suspected Indian threat group.(Citation: MalwareBytes SideCopy Dec 2021)

Tactic Coverage

discovery (5)execution (4)stealth (3)resource development (2)command and control (1)initial access (1)reconnaissance (1)

Techniques Used (16)

T1016System Network Configuration Discovery

discovery

T1036.005Match Legitimate Resource Name or Location

stealth

T1059.005Visual Basic

execution

T1082System Information Discovery

discovery

T1105Ingress Tool Transfer

command and control

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 16 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (2)

S1028Action RATmalware S1029AuTo Stealermalware

References (2)

https://attack.mitre.org/groups/G1008 https://www.malwarebytes.com/blog/news/2021/12/sidecopy-apt-connecting-lures-to-victims-payloads-to-infrastructure