Threat actor · G0049

OilRig

COBALT GYPSYIRN2APT34Helix KittenEvasive SerpensHazel SandstormEUROPIUMITG13Earth SimnavazCrambusTA452

UnattributedNo public state or group attribution on record

OilRig is a suspected Iranian threat group that has targeted Middle Eastern and international victims since at least 2014. The group has targeted a variety of sectors, including financial, government, energy, chemical, and telecommunications. It appears the group carries out supply chain attacks, leveraging the trust relationship between organizations to attack their primary targets.

MITRE ATT&CK Techniques

Associated Malware

BONDUPDATERHelminthISMInjectorLaZagneMangoMimikatzNetODAgentOilBoosterOilCheckOopsIEPOWRUNERPowerExchangePsExecQUADAGENTRDATRGDoorRegSEASHARPEESampleCheck5000SideTwistSolarSysteminfoTasklistZeroClearecertutilftpipconfignetstatngrok

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.