SideWinder APT Launches Operation SouthNet, Weaponizing Netlify and Pages.dev for Espionage

Hunt Intelligence documents Operation SouthNet, an active SideWinder campaign using 50+ malicious domains on free hosting platforms to deploy fake Outlook/Zimbra portals and phishing kits that harvest credentials from government, defense, telecom and maritime targets across Pakistan, Sri Lanka, Nepal, Bangladesh and Myanmar, with evidence of infrastructure recycling, C2 reuse, and maritime-focused lure documents.