SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

SideCopy, a threat actor, is now targeting academic institutions in India with spear-phishing lures, expanding beyond government entities, according to Trellix researchers. The campaigns abuse mshta.exe to execute malicious scripts and bypass standard security protocols. The attacks deliver ReverseRAT, a remote access trojan, to compromise academic networks and steal sensitive data.