India-Linked SideWinder Group Pivots to Hacking Maritime Targets

BlackBerry researchers warn that the India-linked APT SideWinder (aka Razor Tiger/Rattlesnake) has expanded targeting to maritime ports—including Egypt’s Port of Alexandria—and is conducting spear-phishing campaigns using weaponized Office documents that exploit long-standing vulnerabilities (CVE-2017-0199, CVE-2017-11882) to deliver encrypted/obfuscated malware and conduct cyber-espionage against critical maritime infrastructure.