Threat researchers gained access to a portion of SideWinder’s infrastructure and used that access to determine its targets between June and November 2021. They found that SideWinder had targeted thirteen victims in Afghanistan, one in Bhutan, ten in Myanmar, twenty-nine in Nepal, and six in Sri Lanka. Most were government officials or offices. They likely do not represent the full array of SideWinder’s targets.