TF-MAL-elf.sidewalk

Description

ThreatFox malware family `elf.sidewalk`. Printable name: SideWalk.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Breaking Down the Most Effective Malware Remediation Processes
  web:blog.rsisecurity.com

  Malware attacks are increasingly common cybersecurity concerns, as threat actors devise new, sophisticated approaches to infiltrate IT systems. As a result, every organization needs an effective malware remediation process to identify and mitigate malware attacks early on. Read on to learn about best practices for your organization. What are the Most Effective Malware Remediation Processes ...

  2026-05-22 05:23 UTC
• Remediate vulnerabilities with Microsoft Defender Vulnerability ...
  web:learn.microsoft.com

  Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.

  2026-05-22 05:23 UTC
• SideWalk (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Shellcode-based malware family that according to ESET Research was likely written by the same authors as win.crosswalk.

  2026-05-22 05:23 UTC
• KB890830 — Windows Malicious Software Removal Tool (MSRT) March 2026 Update
  web:www.anavem.com

  KB890830 delivers the March 2026 update for Windows Malicious Software Removal Tool (MSRT), adding detection and removal capabilities for 47 new malware families including advanced ransomware variants and AI-powered threats targeting Windows 10, Windows 11, and Windows Server systems.

  2026-05-22 05:23 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:23 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:23 UTC
• PDF PowerPoint Presentation
  web:www.hivepro.com

  SideWalk is a multifunctional backdoor that can load other modules from the command-and-control server. It employs Google Docs as a dead-drop resolver and Cloudflare workers as its command and control (C2) server. The malware runs five threads simultaneously in order to complete a single task.

  2026-05-22 05:23 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 05:23 UTC
• Grayfly: Chinese Threat Actor Uses Newly-discovered Sidewalk Malware
  web:www.security.com

  Sidewalk was recently documented by ESET, who attributed it to a new group it called SparklingGoblin, which it linked to the Winnti malware family . Symantec's Threat Hunter Team has attributed Sidewalk to Grayfly, a longstanding Chinese espionage operation. Members of the group were indicted in the U.S. in 2020.

  2026-05-22 05:23 UTC
• You never walk alone: The SideWalk backdoor gets a Linux variant
  web:www.welivesecurity.com

  The backdoor that was used to attack a Hong Kong university in February 2021 is the same malware family as the SideWalk backdoor, and actually is a Linux variant of the backdoor.

  2026-05-22 05:23 UTC

Only Available for Registered Users. Sign in to view.