Recently, in May 2022 a successful cyber attack was carried out by the sophisticated suspected Indian APT actor called Sidewinder against Pakistan Air Force Headquarters, reported by Check Point Research. The attack led to stealing of about 20,000 files critical to Pakistani military which included identities of "high ranking military officers" as well. Along with it, Check Point Research found a username in one of those files called 'gnss' and they suggest that it might refer to China's BeiDou Global Navigation Satellite System used by pakistan military as other "files seen also had names relating to satellite communication, implying data around this" (this could very well mean with a huge possibility that their GNSS also got compromised).
web.archive.org
Indicators of Compromise(feed these in VirusTotal if you want to check technical details about these IOC):
A Hit is made: Suspected India-based Sidewinder APT successfully cyber attacks Pakistan military focused targets - Check Point Software
Check Point Research (CPR) reported evidence suggesting that Pakistan Air Force’s Headquarters was a victim of a successful attack conducted by
web.archive.org
Indicators of Compromise(feed these in VirusTotal if you want to check technical details about these IOC):
Last edited:
And just to give you an idea how sophisticated our attack was. The first IOC which is a malware file can't even be flagged by any AV out there in the market. So, virtually this file is not a malware even after being a malware
