Cybersecurity investigators have found new evidence of an ongoing cyberespionage campaign against Indian defense units and military personnel at least since 2019 with the aim of stealing sensitive information. Named the "Operation SideCopy" of the Indian company Quick Heal, the attack was aimed at the main threat team (APT) that managed to stay under the radar by "copying" the tactics of other threatening actors like SideWinder. Exploiting the Microsoft Equation Editor error The start of the campaign is an embedded email attachment - either with a ZIP file containing an LNK file or a Microsoft Word document - that triggers a series of infections through a series of steps to download the final payment. In addition to identifying three different chains of infection, it is noteworthy that one of them used a template injection with a Microsoft Equation Editor error (CVE-2017-11882), a 20-year-old memory corruption problem at Microsoft Office, which, when used succes...