← Back to Actors
Sidewinder
SidewinderT-APT-04Rattlesnake
[Sidewinder](https://attack.mitre.org/groups/G0121) is a suspected Indian threat actor group that has been active since at least 2012. They have been observed targeting government, military, and business entities throughout Asia, primarily focusing on Pakistan, China, Nepal, and Afghanistan.(Citation: ATT Sidewinder January 2021)(Citation: Securelist APT Trends April 2018)(Citation: Cyble Sidewinder September 2020)
30
Techniques
30
Covered
0
Gaps
100%
Coverage
Coverage30/30
COVERED (30)
T1016System Network Configuration Discovery41 det.T1020Automated Exfiltration20 det.T1027.010Command Obfuscation42 det.T1027.013Encrypted/Encoded File8 det.T1033System Owner/User Discovery62 det.T1036.005Match Legitimate Resource Name or Location49 det.T1057Process Discovery24 det.T1059.001PowerShell384 det.T1059.005Visual Basic71 det.T1059.007JavaScript64 det.T1071.001Web Protocols83 det.T1074.001Local Data Staging10 det.T1082System Information Discovery91 det.T1083File and Directory Discovery49 det.T1105Ingress Tool Transfer199 det.T1119Automated Collection12 det.T1124System Time Discovery4 det.T1203Exploitation for Client Execution81 det.T1204.001Malicious Link11 det.T1204.002Malicious File468 det.T1218.005Mshta51 det.T1518Software Discovery17 det.T1518.001Security Software Discovery11 det.T1547.001Registry Run Keys / Startup Folder53 det.T1559.002Dynamic Data Exchange1 det.T1566.001Spearphishing Attachment1144 det.T1566.002Spearphishing Link1194 det.T1574.001DLL111 det.T1598.002Spearphishing Attachment2 det.T1598.003Spearphishing Link353 det.