BlackOasis

threat actor

also known as

Other names and identifiers for this entity.

ATT&CK

BlackOasis

MISP

BlackOasis

BlackOasis is a Middle Eastern threat group that is believed to be a customer of Gamma Group. The group has shown interest in prominent figures in the United Nations, as well as opposition bloggers, activists, regional news correspondents, and think tanks. A group known by Microsoft as NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified.

resolved ATT&CK groups

Threat groups associated with this.

G0063BlackOasis

techniques used (1)

ATT&CK techniques this enables or maps to.

T1027Obfuscated Files or Information

references

External citations — patches, advisories, analysis.

https://securelist.com/blackoasis-apt-and-new-targeted-attacks-leveraging-zero-day-exploit/82732/
https://www.fireeye.com/blog/threat-research/2017/09/zero-day-used-to-distribute-finspy.html
https://attack.mitre.org/groups/G0063/