Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

The Pakistan-aligned threat actor SideCopy has launched a targeted spear-phishing campaign against Afghanistan's Ministry of Finance, deploying the open-source Xeno RAT malware. The attack vector involves a ZIP archive containing a malicious LNK file with a Pashto-language filename designed to deceive targets into execution.

Cybersecurity researchers have disclosed details of a spear-phishing campaign likely undertaken by the Pakistan-aligned SideCopy group targeting Afghanistan's Ministry of Finance with an open-source remote access trojan called Xeno RAT. "The campaign opens with a spear phishing delivery - a ZIP archive containing a malicious LNK file bearing a carefully crafted Pashto-language filename,"

Originally published at thehackernews.com

#Apt #Cybersecurity #Government-Sector #Malware #Remote-Access-Trojan #Spear-Phishing #Vulnerabilities

Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

Talk to an architect about applying this to your stack.

More from the journal

AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.

Beyond Assume-Breach: How AI-Native Security Will Reshape Enterprise Defense

How Leading Organizations Are Turning EDR Into Operational Resilience