Sidewinder shifts to targeting of nuclear, maritime orgs

Sidewinder shifts to targeting of nuclear, maritime orgs

Phishing and ancient vulns still do the trick for one of the most prolific groups around

SideWinder APT Targets Maritime, Nuclear, and IT Sectors Across Asia, Middle East, and Africa

Maritime and logistics companies in South and Southeast Asia, the Middle East, and Africa have become the target of an advanced persistent threat (APT) group dubbed SideWinder. The attacks, observed by Kaspersky in 2024, spread across Bangladesh, Cambodia, Djibouti, Egypt, the United Arab Emirates, and Vietnam. Other targets of interest include nuclear power plants and nuclear energy

According to Kaspersky's current analysis, the notorious Advanced-Persistent-Threat (APT) group "SideWinder" has adapted its attack strategies and expanded its geographical targets. As part of the recent espionage campaign, Sidewinder is now also targeting nuclear power plants and energy facilities. Affected companies are mainly located in Africa and Southeast Asia, but also in parts of Europe, including Austria. Sidewinder has been active since…

SideWinder targets the maritime and nuclear sectors with an updated toolset

Last year, we published an article about SideWinder, a highly prolific APT group whose primary targets have been military and government entities in Pakistan, Sri Lanka, China, and Nepal. In it, we described activities …

SideWinder APT attacks in H2 2024

Last year, we published an article about SideWinder, a highly prolific APT group whose primary targets have been military and government entities in Pakistan, Sri Lanka, China, and Nepal. In it, we described activities that had mostly happened in the first half of the year. We tried to draw attention to the group, which was aggressively extending its activities beyond their typical targets, infecting government entities, logistics companies and …