Monday 2 November
Global

Your region, kept on this device.

SideCopy

Threat actor

Attributed to Pakistan by MITRE ATT&CK (source). An attribution, not a proven fact.

Targets

Sectors: Government

Regions: South Asia

Source: MITRE ATT&CK

Known techniques

  • T1016System Network Configuration Discovery
  • T1036.005Match Legitimate Resource Name or Location
  • T1059.005Visual Basic
  • T1082System Information Discovery
  • T1105Ingress Tool Transfer
  • T1106Native API
  • T1204.002Malicious File
  • T1218.005Mshta
  • T1518Software Discovery
  • T1518.001Security Software Discovery
  • T1566.001Spearphishing Attachment
  • T1574.001DLL
  • T1584.001Domains
  • T1598.002Spearphishing Attachment
  • T1608.001Upload Malware
  • T1614System Location Discovery
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.