SideWinder, an Indian APT, distributed spear-phishing lures to various Pakistani government officials. The lures were primarily related to the Pakistani military or U.S.-Pakistan relations. After the initial campaign against Pakistan was detected, the group used the same group of command-and-control servers to launch payloads in Turkey. The group’s targets in Turkey remain unclear.