The Overlapping Cyber Strategies Of Transparent Tribe And SideCopy Against India
Essential information
- Published
- 15/05/2024 15:16
- Modified
- 15/05/2024 15:32
- Tags
- 2024-05-10 2024-05-15 action rat apt india infection chain malware rat reverserat
- Related entities
- 21 observables, 1 intrusion sets (apt), 14 techniques (mitre), 2 malware, 4 others
Description
CRIL's analysis revealed SideCopy APT group's sophisticated malware campaign, employing malicious LNK files and a complex infection chain involving HTAs and loader DLLs to deploy malware like ReverseRAT and Action RAT. SideCopy targets Indian universities and government entities, suggesting potential overlap with Transparent Tribe's tactics. The campaign leverages spam emails with malicious links to initiate infections and establish backdoor access for data exfiltration and remote control of victim systems. SideCopy demonstrates evolving techniques, demanding heightened cybersecurity vigilance to defend against persistent threats.