Cybersecurity incident — 2023-11-06 00:00:00
Affected organization: Government and defense organizations in India
Affected country: India
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Espionage
Actor: SideCopy (APT36)
Actor type: Nation-State
Actor country: Pakistan

Researchers from Seqrite discover multiple campaigns of the Pakistan-based APT SideCopy, targeting Indian government and defense entities, exploiting the recent WinRAR vulnerability CVE-2023-38831 to deploy AllaKore RAT, DRat and additional payloads.