SideWinder Archives • Daily CyberSecurity

SideWinder APT Shifts to PDF/ClickOnce Chain to Target South Asian Diplomacy with StealerBot

Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

SideWinder APT Shifts to PDF/ClickOnce Chain to Target South Asian Diplomacy with StealerBot

Do Son October 28, 2025

Trellix exposed SideWinder APT's campaign against South Asian diplomacy. It uses PDF/ClickOnce lures with a signed MagTek binary to deploy StealerBot for deep intelligence collection.

SideWinder APT Launches Operation SouthNet, Weaponizing Netlify and Pages.dev for Espionage NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

SideWinder APT Launches Operation SouthNet, Weaponizing Netlify and Pages.dev for Espionage

Do Son October 7, 2025

APT SideWinder launched Operation SouthNet, targeting South Asia with over 50 malicious phishing portals hosted on Netlify and pages.dev to steal government and military credentials.

SideWinder APT Group: Maritime & Nuclear Targets, Evolved Malware SideWinder group

SideWinder APT Group: Maritime & Nuclear Targets, Evolved Malware

Do Son March 11, 2025

Explore the rise of the SideWinder group and its cyber-espionage tactics targeting maritime and nuclear sectors.

Sync-Scheduler Malware: Unveiling a Sophisticated Espionage Attack APT Bitter - Sync-Scheduler

Sync-Scheduler Malware: Unveiling a Sophisticated Espionage Attack

Do Son November 21, 2024

Discover the targeted cyber espionage campaign against the Pakistan Navy and the role of the Sync-Scheduler malware.

Sri Lanka: New Target for T-APT-04 APT Group T-APT-04 - Rattlesnake

Sri Lanka: New Target for T-APT-04 APT Group

Do Son November 5, 2024

Discover the details of the cyber-espionage operation conducted by SideWinder, the APT group behind the T-APT-04 campaign.

SideWinder APT: A Decade of Evolution and Global Expansion Screenshot 2024-10-15 202906

SideWinder APT: A Decade of Evolution and Global Expansion

Do Son October 15, 2024

Get insights into the SideWinder APT group's tactics and techniques. Learn about their global expansion and technical expertise in cyber espionage.

SideWinder APT Group Sets Sights on Ports and Maritime Facilities in Espionage Campaign DriverFixer0428, Contagious Interview Cache Smuggling, ClickFix Evasion North Korean Cyber Espionage

DriverFixer0428, Contagious Interview Cache Smuggling, ClickFix Evasion North Korean Cyber Espionage

SideWinder APT Group Sets Sights on Ports and Maritime Facilities in Espionage Campaign

Do Son July 31, 2024

Explore the advanced tactics and techniques employed by SideWinder, a notorious nation-state threat actor. Find out how they evade detection and deliver targeted implants.