Threat Actor
SideCopy
- First Reported
- Sep 23, 2021
- Latest Reported
- Jul 1, 2026
Reported Context (4)
- Pakistan-aligned threat group believed to be behind a spear-phishing campaign targeting Afghanistan’s Ministry of Finance and other government entities. Cybersecurity Roundup: Tchap Breach, Phishing Campaigns and Threat Actor Arrest
- Threat group identified by the report as using ACR Stealer. MS-ISAC Reports 7% Rise in Malware Notifications in Q4 2025
- Reported to target Indian critical sectors with spear-phishing, cross-platform RATs, and credential-theft operations. CloudSEK Warns of Hacktivist Attacks, Phishing and APT Activity Targeting India
- The article says the campaign's lures and tactics resemble SideCopy activity, and notes similar Kavach-themed lures in SideCopy attacks. Campaign Targets Indian Government and Military Personnel With Netwire and Warzone RATs
Malware (21)
People (3)
Threat Actors (8)
MITRE ATT&CK (12)
Vendors (2)
Products (26)
Tools (9)
Industries (11)
Countries (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.