SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that the SideCopy group is targeting Indian organizations, including academic institutions, with spear-phishing emails that deploy the ReverseRAT remote access trojan, GBHackers reports. The multistage infection chain documented by Trellix abuses malicious shortcut files and mshta.exe to load the malware in memory, where it can steal passwords, capture screenshots and run commands.