SideCopy
MITRE G0134Also known as Transparent Tribe, APT36, TAG-140
Reports
3
First seen
Jun 1, 2026
Last seen
Sep 22, 2026
Motivation
Espionage
Targeting
Sectors
Victim regions
×1×2
Afghanistan×2
India×1
Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.
Top ATT&CK techniques
T1041 Exfiltration Over C2 Channel ×2T1547.001 Boot or Logon Autostart Execution: Registry Run Keys / Start Folder ×2T1219 Remote Access Software ×2T1113 Screen Capture ×2T1218.005 System Binary Proxy Execution: Mshta ×2T1204 User Execution ×1T1140 Deobfuscate/Decode Files or Information ×1T1115 Clipboard Data ×1T1071 Application Layer Protocol ×1T1021 Remote Services ×1T1005 Data from Local System ×1T1056.004 Input Capture - Keylog ×1
Indicators
filename ×6domain ×2
Indicator values are available on Pro and via the API.
Recent reports
High