Threat actor · G1009

Moses Staff

DEV-0500Marigold Sandstorm

UnattributedNo public state or group attribution on record

Moses Staff is a suspected Iranian threat group that has primarily targeted Israeli companies since at least September 2021. Moses Staff openly stated their motivation in attacking Israeli companies is to cause damage by leaking stolen sensitive data and encrypting the victim's networks without a ransom demand.

MITRE ATT&CK Techniques

T1016 T1021.002 T1027.013 T1082 T1087.001 T1105 T1190 T1505.003 T1553.002 T1587.001 T1588.002 T1686.003

Associated Malware

DCSrvPsExecPyDCryptStrifeWater

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.