SideCopy is a cyber-espionage threat actor that emerged in early 2019, consistently assessed to be of Pakistani origin. Its primary motivation is the theft of sensitive information, particularly from government and military entities in South Asian countries. The group distinguishes itself by deliberately mimicking the tactics, techniques, and procedures of other threat actors, notably Sidewinder, a suspected Indian group, as a means to mislead attribution. Initially focusing on Windows systems, SideCopy has evolved its operations to include multi-platform attacks targeting Linux environments and has broadened its target scope beyond defense sectors to include critical infrastructure. The group is often linked to or considered a sub-group of Transparent Tribe, also known as APT36.

Aliases del actor

G1008Pakistanuna superposición parcial con el grupo Transparent Tribe

Actores similares

Transparent Tribeactor · 1transparent-tribeactor · 1contiransomware · 351ContFRransomware · 2lunalockransomware · 2iocontrolactor · 1apt-desertfalconactor · 1backconfigactor · 1redcontroleactor · 1apt-stealthfalconactor · 1