Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Operation SouthNet: SideWinder Targets South Asia Maritime

hunt.io | blog | #threat-intelligence | #phishing | #apt | #maritime | #sidewinder | #south-asia

Summary

Operation SouthNet: SideWinder shifted focus to South Asia's maritime sector, staging 50+ credential-harvesting domains on free hosting platforms and reusing legacy C2 across Pakistan and Sri Lanka.
Published
Collected

original ↗

Related coverage

blog · hunt.io
SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia
Hunt.io's SpiceRAT detections linked shared infrastructure across malware families from Bitdefender's SilkParasite report to energy, government, and telecom targets in Central Asia.
blog · hunt.io
Chinese-Speaking Operator Uses AI Agents to Target Government and Education Systems Across Asia
Hunt.io traced five exposed directories to a SecFlow-run campaign that used Claude, Qwen and DeepSeek as workers against government, education and diplomatic targets across Asia.
blog · hunt.io
APT Sidewinder Abuses Netlify to Mimic Government and Military Portals in South Asia
Sidewinder-linked phishing pages in Chinese, English, and Japanese lure government and financial targets across Asia with ZIP/RAR document lures and shared download.php kits; 28 pages found.
blog · blog.viettelcybersecurity.com
Holy Water: chiến dịch tấn công mạng sáng tạo vừa được phát hiện
Kaspersky's Holy Water campaign analysis: compromised religious and charity websites in Asia served staged JavaScript that profiled visitors and delivered fake Flash updates installing backdoors.
blog · blog.viettelcybersecurity.com
Mustang Panda – một case dở khóc dở cười
Viettel researchers walk through a Mustang Panda APT sample disguised as a job CV that targeted a Vietnamese provincial government via an @edu.vn phishing email.
research · blog.viettelcybersecurity.com
Chiến dịch của nhóm APT Goblin Panda lợi dụng đại dịch Covid-19
Viettel Threat Intelligence tracks Goblin Panda (aka Hellsing, 1937CN) campaigns exploiting COVID-19 themes, using RTF exploits and PlugX/NewCoreRAT to breach government targets and evade most AVs.
back