← Back to all threat actors

Sidewinder

Also known as T-APT-04, Rattlesnake
Tracked as G0121

Sidewinder is a suspected Indian threat actor group that has been active since at least 2012. They have been observed targeting government, military, and business entities throughout Asia, primarily focusing on Pakistan, China, Nepal, and Afghanistan.

How we source and review actor profiles
Motivation
nation-state
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Cataloged
IdentityTracking identifier: G0121

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: T-APT-04

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: Rattlesnake

Reviewed identity mapping approved on this date.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

SidewinderCanonical Name
RattlesnakeAlias
T-APT-04Alias
G0121Tracking Id

Loading CVEs, techniques, indicators, malware, victims, and activity...