SideWinder Espionage Campaign Expands Across Southeast Asia

Recent reporting attributes expanded cyber-espionage activity in Southeast Asia to the SideWinder (aka RagaSerpent) APT: operators use government-audit themed spear-phishing, credential theft, exploitation of long-patched MS Office flaws and DLL hijacking to stage payloads, while leveraging runtime-derived configuration and frequent C2/domain rotation to maintain long-term, hard-to-remediate access across government, telecommunications, maritime, logistics and nuclear sector targets.