Notorious SideCopy APT group sets sights on India’s DRDO

SideCopy APT (attributed to Pakistan) ran a targeted spearphishing campaign against India's DRDO using a malicious LNK inside a ZIP that invoked mshta to run staged HTA loaders which decode and load DLLs in memory, perform DLL sideloading of a malicious DUser.dll (ActionRAT), deploy an AuTo Stealer, establish persistence via registry run keys, and beacon to a disclosed C2; the report includes technical TTPs and IOCs (file hashes, malicious URLs, and C2 IP).