SideWinder APT group’s new arsenal named WarHawk

Threat Level

Actor Report

For a detailed threat advisory, download the pdf file here

Summary

The SideWinder APT gang operates espionage campaigns against government, military, and business sectors throughout Asia, primarily Pakistan, by employing the WarHawk backdoor to exfiltrate vulnerable system metadata to a remote server.