Home / Threat actors / SideCopy
SideCopy G1008
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
17
Techniques
2
Malware and tools
SideCopy is a Pakistani threat group that has primarily targeted South Asian countries, including Indian and Afghani government personnel, since at least 2019. SideCopy's name comes from its infection chain that tries to mimic that of Sidewinder, a suspected Indian threat group.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Reconnaissance
T1598.002 Spearphishing Attachment Resource Development
T1584.001 DomainsT1608.001 Upload Malware Initial Access
T1566.001 Spearphishing Attachment Execution
T1059.005 Visual BasicT1106 Native APIT1204.002 Malicious FileT1574.001 DLL Stealth
T1036.005 Match Legitimate Resource Name or LocationT1218.005 MshtaT1574.001 DLL Discovery
T1016 System Network Configuration DiscoveryT1082 System Information DiscoveryT1518 Software DiscoveryT1518.001 Security Software DiscoveryT1614 System Location Discovery Command and Control
T1105 Ingress Tool Transfer Malware and tools
- Action RATMalwareS1028
- AuTo StealerMalwareS1029
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.