HEXANE
LyceumSiamesekittenSpirlin
UnattributedNo public state or group attribution on record
HEXANE is a cyber espionage threat group that has targeted oil & gas, telecommunications, aviation, and internet service provider organizations since at least 2017. Targeted companies have been located in the Middle East and Africa, including Israel, Saudi Arabia, Kuwait, Morocco, and Tunisia. HEXANE's TTPs appear similar to APT33 and OilRig but due to differences in victims and tools it is tracked as a separate entity.
MITRE ATT&CK Techniques
Associated Malware
BITSAdminDanBotDnsSystemEmpireKevinMilanMimikatzPingPoshC2Sharkipconfignetstat
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.