Tag: OilRig

Crambus cyber espionage group exploits PowerShell backdoor to target Middle Eastern government

Crambus cyber espionage group exploits PowerShell backdoor to target Middle Eastern government

Symantec researchers have exposed the operations of the Crambus espionage group (also known as OilRig and APT34), which focuses on infiltrating the Middle Eastern government. These attackers, believed to be linked to Iran, have compromised numerous computers and servers over…

New APT34 backdoor malware infection campaign targets Middle Eastern organizations for cyberespionage

New APT34 backdoor malware infection campaign targets Middle Eastern organizations for cyberespionage

Trend Micro researchers provided an analysis of a new APT34 malware infection campaign that targets organizations in the Middle East for cyberespionage last December. Using the backdoor malware, the campaign abuses legitimate but compromised email accounts to send stolen data…

AttackIQ publishes OilRig attack graphs emulating Iranian hacker’s global attack campaigns

AttackIQ publishes OilRig attack graphs emulating Iranian hacker’s global attack campaigns

AttackIQ released two new attack graphs that emulate different aspects of OilRig’s campaigns carried out by the adversary. The graphs would help customers validate their security controls and defenses to help improve cybersecurity readiness. Based on the research, OilRig has…