Início / Grupos de ameaça / Sidewinder
Sidewinder G0121
Também conhecido como: T-APT-04, Rattlesnake
Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK
2
CVEs associadas
32
Técnicas
1
Malwares e ferramentas
Sidewinder is a suspected Indian threat actor group that has been active since at least 2012. They have been observed targeting government, military, and business entities throughout Asia, primarily focusing on Pakistan, China, Nepal, and Afghanistan.
Vulnerabilidades exploradas
CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.
CVE-2020-0674
Alta · 7.5
KEV Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
“Sidewinder has exploited vulnerabilities to gain execution including CVE-2017-11882 and CVE-2020-0674.”
“Sidewinder has exploited vulnerabilities to gain execution including CVE-2017-11882 and CVE-2020-0674.”
Técnicas por tática
Reconhecimento
T1598.002 Spearphishing AttachmentT1598.003 Spearphishing Link Acesso inicial
T1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link Execução
T1059.001 PowerShellT1059.005 Visual BasicT1059.007 JavaScriptT1203 Exploitation for Client ExecutionT1204.001 Malicious LinkT1204.002 Malicious FileT1559.002 Dynamic Data ExchangeT1574.001 DLL Persistência
T1547.001 Registry Run Keys / Startup Folder Escalada de privilégios
T1547.001 Registry Run Keys / Startup Folder Furtividade
T1027.010 Command ObfuscationT1027.013 Encrypted/Encoded FileT1036.005 Match Legitimate Resource Name or LocationT1218.005 MshtaT1574.001 DLL Descoberta
T1016 System Network Configuration DiscoveryT1033 System Owner/User DiscoveryT1057 Process DiscoveryT1082 System Information DiscoveryT1083 File and Directory DiscoveryT1124 System Time DiscoveryT1518 Software DiscoveryT1518.001 Security Software Discovery Coleta
T1074.001 Local Data StagingT1119 Automated Collection Comando e controle
T1071.001 Web ProtocolsT1105 Ingress Tool Transfer Exfiltração
T1020 Automated Exfiltration Malwares e ferramentas
- KoadicFerramentaS0250
© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.