#sidewinder

[ follow ]
#spear-phishing #stealerbot #moduleinstaller #clickonce #cybersecurity #malware #south-asia
fromThe Hacker News
4 hours ago

SideWinder Adopts New ClickOnce-Based Attack Chain Targeting South Asian Diplomats

The activity "reveals a notable evolution in SideWinder's TTPs, particularly the adoption of a novel PDF and ClickOnce-based infection chain, in addition to their previously documented Microsoft Word exploit vectors," Trellix researchers Ernesto Fernández Provecho and Pham Duy Phuc said in a report published last week. The attacks, which involved sending spear-phishing emails in four waves from March through September 2025, are designed to drop malware families such as ModuleInstaller and StealerBot to gather sensitive information from compromised hosts.
Information security
Information security
fromThe Hacker News
5 months ago

South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware

SideWinder targets government institutions in Sri Lanka, Bangladesh, and Pakistan using spear-phishing with geofenced payloads to deploy StealerBot.
[ Load more ]