Skip to content

CyberSIXT Search

Threat actor · coverage timeline

SideWinder

8 articles from 4 outlets between 12 Sep 2025 and 18 Mar. First reported by GBHackers. The busiest day was Tue 28 Oct 2025, with 2 articles.

Articles: 8; all time · from 4 outlets
Days with coverage: 7; of 188 days · all time
Busiest day · all time: 2; articles on Tue 28 Oct 2025
Last 7 days: 0a day; vs 0 a day · previous 7 days
First report: 12 Sep 2025; GBHackers
CVEs named: 0; in these articles

Coverage over time

8 articles · 12 Sep 2025 – 18 Mar

12 Sep 2025First report12 Sep 2025 · GBHackers

Show as table

SideWinder: articles per day
Day (UTC)	Articles	Outlets
Fri 12 Sep 2025	1	GBHackers 1
Mon 15 Sep 2025	1	GBHackers 1
Fri 3 Oct 2025	1	GBHackers 1
Tue 7 Oct 2025	1	SecurityOnline 1
Thu 23 Oct 2025	1	GBHackers 1
Tue 28 Oct 2025	2	SecurityOnline 1, The Hacker News 1
Wed 18 Mar	1	Dark Reading 1

Articles

8 articles

Wed 18 Mar1 article

13:08
SideWinder Espionage Campaign Expands Across Southeast AsiaDark Reading

Tue 28 Oct 2025 20252 articles

04:35
SideWinder Adopts New ClickOnce-Based Attack Chain Targeting South Asian DiplomatsThe Hacker News
02:20
SideWinder APT Shifts to PDF/ClickOnce Chain to Target South Asian Diplomacy with StealerBotSecurityOnline

Thu 23 Oct 2025 20251 article

08:27
SideWinder Leverages ClickOnce Installer to Deliver StealerBot MalwareGBHackers

Tue 7 Oct 2025 20251 article

01:26
SideWinder APT Launches Operation SouthNet, Weaponizing Netlify and Pages.dev for EspionageSecurityOnline

Fri 3 Oct 2025 20251 article

10:50
SideWinder Hacker Group Targets Users with Fake Outlook/Zimbra Portals to Steal Login CredentialsGBHackers

Mon 15 Sep 2025 20251 article

13:40
Sidewinder Hackers Weaponize Nepal Protests to Spread Cross-Platform MalwareGBHackers

Fri 12 Sep 2025 20251 article

09:05
Sidewinder Hackers Exploit LNK Files to Deploy Malicious ScriptsGBHackers · first report