G0049 OilRig
EnterpriseICSauch bekannt alsOilRig · COBALT GYPSY · IRN2 · APT34 · Helix Kitten · Evasive Serpens · Hazel Sandstorm · EUROPIUM · ITG13 · Earth Simnavaz · Crambus · TA452
OilRig is a suspected Iranian threat group that has targeted Middle Eastern and international victims since at least 2014. The group has targeted a variety of sectors, including financial, government, energy, chemical, and telecommunications. It appears the group carries out supply chain attacks, leveraging the trust relationship between organizations to attack their primary targets. The group works on behalf of the Iranian government based on infrastructure details that contain references to Iran, use of Iranian infrastructure, and targeting that aligns with nation-state interests.
kanonischer Akteur
Die Gruppe, der dies zugeschrieben wird.
genutzte Techniken (82)
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
genutzte Software (30)
Zugehörige Malware und Tools.
Kampagnen (2)
Kampagnen, die dies verwenden.
Erkannt durch (Sigma) (5)
Zugehörige Sigma-Erkennungsregeln.
Quelle
Wo diese Definition veröffentlicht ist.