Actors Insights|Latest update29/07/2026

APT34

Named by MandiantSuspected state sponsor: Islamic Republic of Iran

APT34 is Mandiant's designation for the Iranian MOIS-linked threat cluster known as OilRig. Active since at least 2014, Mandiant identified APT34 as an advanced persistent threat focused on long-term espionage against government, energy, and financial organizations in the Middle East. Mandiant has documented the group's evolution over more than a decade, including its use of DNS-based command and control, LinkedIn-based social engineering lures, and a continuously expanding custom malware arsenal. APT34 remains one of the most thoroughly documented Iranian state-sponsored actors in public threat intelligence.

First Seen:Jan 2014
Last Seen:May 2026
Indexed Reports:32
Public IOCs:600
Cluster: OilRigMitre: OilRigMisp: OilRig
also known as:
Twisted Kitten (CrowdStrike)COBALT GYPSY (SecureWorks)Crambus (Symantec)Helix Kitten (CrowdStrike)APT 34IRN2 (Area 1)ATK40 (Thales)G0049 (Mitre)Evasive SerpensHazel Sandstorm (Microsoft)EUROPIUM (Microsoft)TA452 (Proofpoint)Earth Simnavaz (Trend Micro)OilRig (Palo Alto)ITG13 (IBM)APT-C-49

Targeted Regions

Albania
AL
Albania
Albania
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Mar 2019 ~ May 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jan 2014 ~ Aug 2019
Bahrain
BH
Bahrain
Bahrain
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Cambodia
KH
Cambodia
Cambodia
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
China
CN
China
China
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Egypt
EG
Egypt
Egypt
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Europe
EU
Europe
Europe
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Hong Kong
HK
Hong Kong
Hong Kong
Mar 2019 ~ May 2019
Iran
IR
Iran
Iran
Mar 2019 ~ May 2019
Iraq
IQ
Iraq
Iraq
Feb 2024 ~ Sep 2024
Jun 2024 ~ Mar 2025
Feb 2024 ~ Sep 2024
Jun 2024 ~ Mar 2025
Israel
IL
Israel
Israel
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Mar 2019 ~ May 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jan 2014 ~ Aug 2019
Jordan
JO
Jordan
Jordan
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Apr 2022 ~ Aug 2022
Jun 2022 ~ Jun 2022
Apr 2022 ~ May 2022
Apr 2022 ~ May 2022
Apr 2022 ~ May 2022
Apr 2022 ~ Jun 2022
Dec 2022 ~ Feb 2023
Kazakhstan
KZ
Kazakhstan
Kazakhstan
Mar 2019 ~ May 2019
Kuwait
KW
Kuwait
Kuwait
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Lebanon
LB
Lebanon
Lebanon
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Mar 2019 ~ May 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jan 2014 ~ Aug 2019
Feb 2020 ~ Mar 2020
Jan 2020 ~ Mar 2020
Jan 2021 ~ Apr 2021
Jan 2021 ~ Apr 2021
Macau
MO
Macau
Macau
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Mexico
MX
Mexico
Mexico
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Middle East
ME
Middle East
Middle East
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
May 2016 ~ May 2016
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
Jul 2017 ~ Dec 2017
May 2016 ~ Apr 2019
Jan 2018 ~ May 2019
Jan 2014 ~ Aug 2019
Jul 2017 ~ Dec 2017
May 2016 ~ Apr 2019
Jan 2018 ~ May 2019
Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019
Jan 2018 ~ May 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jan 2014 ~ Aug 2019
Dec 2022 ~ Feb 2023
Aug 2023 ~ Dec 2023
Aug 2023 ~ Dec 2023
Myanmar
MM
Myanmar
Myanmar
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Nigeria
NG
Nigeria
Nigeria
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
North Korea
KP
North Korea
North Korea
Mar 2019 ~ May 2019
Oman
OM
Oman
Oman
Mar 2019 ~ May 2019
Apr 2026 ~ May 2026
Palestine
PS
Palestine
Palestine
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Portugal
PT
Portugal
Portugal
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
Qatar
QA
Qatar
Qatar
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Samoa
WS
Samoa
Samoa
Mar 2019 ~ May 2019
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Mar 2019 ~ May 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jan 2014 ~ Aug 2019
Dec 2022 ~ Feb 2023
Aug 2023 ~ Sep 2023
Somalia
SO
Somalia
Somalia
Aug 2019 ~ Nov 2019
South Korea
KR
South Korea
South Korea
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jan 2014 ~ Aug 2019
Spain
ES
Spain
Spain
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
May 2016 ~ Apr 2019
Taiwan
TW
Taiwan
Taiwan
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Thailand
TH
Thailand
Thailand
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
Turkey
TR
Turkey
Turkey
Mar 2019 ~ May 2019
Aug 2019 ~ Nov 2019
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
Jul 2018 ~ May 2023
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
Jul 2018 ~ May 2023
Mar 2019 ~ May 2019
May 2016 ~ Apr 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jul 2018 ~ May 2023
Jan 2014 ~ Aug 2019
Jul 2018 ~ May 2023
Jul 2018 ~ May 2023
Jul 2018 ~ May 2023
Jul 2018 ~ May 2023
Jul 2018 ~ May 2023
Jul 2018 ~ May 2023
Dec 2022 ~ Feb 2023
Jul 2018 ~ May 2023
May 2023 ~ May 2023
United States
US
United States
United States
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2020 ~ Jan 2020
Jun 2023 ~ Aug 2023
Zimbabwe
ZW
Zimbabwe
Zimbabwe
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Mar 2019 ~ May 2019
Jan 2014 ~ Aug 2019
Aug 2019 ~ Nov 2019
Jan 2014 ~ Aug 2019
Jan 2014Jun 2026

Targeted Sectors

Government Agencies and ServicesFinancialEnergyTelecommunicationInformation TechnologyTransportationDefenseUniversityUtilitiesManufacturingProfessional ServiceAerospaceHealthcareMediaMedicalMilitaryResearchersOil and Gas

Recent Indexed Reports

  1. Public
    Iranian Threat Actors Breach 12 Omani Ministries, Exposing 26,000 Records
  2. Public
    APT34 Targets Iraqi Government with Dual-Channel C2 and Obfuscated Backdoors
  3. Public
    Veaty and Spearal Malware Used in Targeted Iraqi Government Attacks
see more

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.