Actors Insights|Latest update29/07/2026

EUROPIUM

Named by MicrosoftSuspected state sponsor: Islamic Republic of Iran

EUROPIUM is Microsoft's legacy designation for the Iranian MOIS-linked threat cluster formally renamed Hazel Sandstorm in 2023. Active since at least 2017, EUROPIUM was documented targeting government and financial organizations in the Middle East using OilRig-associated tooling and infrastructure. Microsoft retired the EUROPIUM designation as part of its 2023 threat actor naming taxonomy update, replacing it with Hazel Sandstorm. All EUROPIUM-attributed activity is now consolidated under the Hazel Sandstorm designation representing the same OilRig/APT34 cluster.

This threat actor's name is changed to Hazel Sandstorm
First Seen:Sep 2017
Last Seen:Jun 2025
Indexed Reports:1
Public IOCs:20
Cluster: OilRigMitre: OilRigMisp: OilRig
also known as:
Twisted Kitten (CrowdStrike)COBALT GYPSY (SecureWorks)Crambus (Symantec)Helix Kitten (CrowdStrike)APT 34IRN2 (Area 1)ATK40 (Thales)G0049 (Mitre)Evasive SerpensHazel Sandstorm (Microsoft)EUROPIUM (Microsoft)TA452 (Proofpoint)Earth Simnavaz (Trend Micro)OilRig (Palo Alto)ITG13 (IBM)

Targeted Regions

Albania
AL
Albania
Albania
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Israel
IL
Israel
Israel
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Jordan
JO
Jordan
Jordan
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Kuwait
KW
Kuwait
Kuwait
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Turkey
TR
Turkey
Turkey
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Jan 2020Sep 2026

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.