Razor Tiger News Today

Suspected Indian state-backed advanced persistent threat operation SideWinder also known as APT-C-17, T-APT-4, APT-Q-39, Rattlesnake, Hardcore Nationalist, and Razor Tiger has been utilizing server-based polymorphism to facilitate next-stage backdoor delivery in a cyberattack campaign that initially targeted Pakistan government entities in late November before setting sights on Turkey beginning in March, reports The Hacker News.

SideWinder's latest campaign is using server-based polymorphism to distribute additional payloads and sidestep traditional signature-based antivirus.

SideWinder nation-state group has been attributed to cyber attacks against 61 entities related to government, military, law enforcement, banking.

SideWinder APT hackers compromised the official website of Pakistan's National Electric Power Regulatory Authority to deliver a new tailored malware.

SideWinder hackers have expanded their malware arsenal with a new custom tool used to attack public and private entities in Pakistan.