Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with spear-phishing attacks that deploy ReverseRAT on Windows systems.

インド当局は、SideCopyのハッカー集団が教育機関をはじめとするインドの組織を標的にしていると警告しました。攻撃ではスピアフィッシング攻撃を使い、Windowsシステムにワーム型ではなくリモートアクセス型トロイの木馬「ReverseRAT」を仕込みます。 2026年10月15日付の勧告は、この脅威の深刻度を「中」

インド当局は、APT（持続的標的型攻撃）グループ「SideCopy」が、教育機関を含むインドの組織を標的にしていると警告しました。攻撃はスピアフィッシングを使い、Windowsシステムに「ReverseRAT」を感染させます。 2026年10月15日に出された注意喚起は、このリモートアクセス型トロイの木馬（RAT）の

The campaign commences with a spear-phishing email containing a ZIP archive with a malicious LNK file written in Pashto, designed to exploit the ...

SideCopy targets Indian academic institutions with spear-phishing that abuses mshta.exe to deploy ReverseRAT for collection and remote access.

SideCopy, an advanced persistent threat group originating from Pakistan and active since at least 2019, has historically targeted Indian defense forces and government officials.

At a Glance Attribute Details Actor or Group SideCopy (suspected Pakistan-nexus threat group) Activity Type Spear-phishing, living-off-the-land execution, cyberespionage Targets or Victims Academic institutions, defense personnel, and government officials Scale Multiple targeted research and educational organizations across South Asia Jurisdiction / Status Active suspected state-sponsored espionage group; uncharged Source Trellix Advanced Research Center (ARC) Executive Summary Trellix ARC researchers uncovered a new offensive wave driven by the…

The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious scripts and circumvent standard security protocols," Trellix researchers

SideCopy targets Indian academic institutions with spear-phishing that abuses mshta.exe to deploy ReverseRAT for collection and remote access.

The Pakistani APT group SideCopy is now targeting Indian academic institutions in a new spear-phishing campaign that delivers the ReverseRAT trojan.

Haz clic para acceder al contenido completo.

SideCopy targets Indian academic institutions with spear-phishing that abuses mshta.exe to deploy ReverseRAT for collection and remote access.

SideCopy targets Indian academic institutions with spear-phishing that abuses mshta.exe to deploy ReverseRAT for collection and remote access.

The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious scripts and circumvent standard security protocols," Trellix researchers

SideCopy APTがインドの大学等に対し、mshta.exeを悪用してReverseRATを展開するスピアフィッシング攻撃を実行。情報窃取とリモートアクセス取得が目的。学術機関の警戒が必要。

The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious scripts and circumvent standard security protocols," Trellix researchers

Curate Feeds | Make Collections | Customize Email Briefs