OilRig Cluster
Suspected state sponsor: Islamic Republic of IranThe OilRig Cluster, associated with the Iranian Ministry of Intelligence (MOIS), is also among the most notorious advanced persistent threats. Active in cyber industrial espionage, its campaigns are usually destructive. The prime targets of OilRig are countries in the Middle East, though Western entities and governments, particularly in the US, are occasionally targeted. OilRig has targeted various sectors including financial services, energy, chemical, and telecommunication enterprises.
OilRig threat actors utilize a combination of social engineering and supply chain attacks to escalate their level of access.
observatory results
APT34
APT34 is named by Mandiant and at the moment 20 indexed report with 515 related IOCs
Cobalt Gypsy
Cobalt Gypsy is named by SecureWorks and at the moment 2 indexed report with 33 related IOCs
Crambus
Crambus is named by Symantec and at the moment 1 indexed report with 29 related IOCs
EUROPIUM
EUROPIUM is named by Microsoft and at the moment 1 indexed report with 20 related IOCs
Greenbug
Greenbug is named by Symantec and at the moment 9 indexed report with 158 related IOCs
Helix Kitten
Helix Kitten is named by CrowdStrike and at the moment 1 indexed report with 0 related IOCs
OilRig
OilRig is named by Palo Alto and at the moment 24 indexed report with 387 related IOCs
Scarred Manticore
Scarred Manticore is named by Check Point and at the moment 1 indexed report with 3 related IOCs
Most Common Tactics
Targeted Regions
AfghanistanAfghanistan
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
AlbaniaAlbania
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
AustraliaAustralia
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017
BahrainBahrain
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017
Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019 Jun 2018 ~ Nov 2018
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019 Jun 2018 ~ Nov 2018
Nov 2017 ~ Sep 2019
Sep 2019 ~ Sep 2019 Nov 2017 ~ Sep 2019
BangladeshBangladesh
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
EuropeEurope
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
FranceFrance
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
GermanyGermany
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
IndiaIndia
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
IranIran
Apr 2016 ~ Jul 2017
Jun 2016 ~ Jan 2017 Apr 2016 ~ Jul 2017
Jun 2016 ~ Jan 2017 Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
IraqIraq
Apr 2016 ~ Jul 2017
Jun 2016 ~ Jan 2017 Apr 2016 ~ Jul 2017
Jun 2016 ~ Jan 2017 Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
IsraelIsrael
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019 Apr 2016 ~ Jul 2017
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Sep 2016 ~ Oct 2016 Apr 2016 ~ Jul 2017
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017 Apr 2016 ~ Jul 2017
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Apr 2017 ~ Apr 2017 Apr 2016 ~ Jul 2017
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Oct 2017 ~ Oct 2017
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Nov 2021 ~ Dec 2023 Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Nov 2021 ~ Dec 2023 Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Nov 2021 ~ Dec 2023 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Nov 2021 ~ Dec 2023 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Nov 2021 ~ Dec 2023 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
JordanJordan
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Apr 2022 ~ May 2022 Apr 2022 ~ May 2022 Apr 2022 ~ May 2022 Apr 2022 ~ Jun 2022
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
KuwaitKuwait
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017
Jul 2018 ~ Sep 2018 Jun 2018 ~ Nov 2018
Jul 2018 ~ Sep 2018 Jun 2018 ~ Nov 2018
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
LebanonLebanon
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Feb 2020 ~ Mar 2020 Jan 2020 ~ Mar 2020
Jan 2021 ~ Apr 2021
Middle EastMiddle East
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Sep 2016 ~ Jul 2017 May 2016 ~ Apr 2019 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019
Sep 2016 ~ Jul 2017 May 2016 ~ Apr 2019 Jan 2017 ~ Jan 2017 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019
Sep 2016 ~ Jul 2017 May 2016 ~ Apr 2019 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Aug 2017 ~ Aug 2017
May 2016 ~ Apr 2019 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019 Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019 Aug 2018 ~ Nov 2018 Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Dec 2022 ~ Feb 2023
OmanOman
Jul 2018 ~ Sep 2018
Jul 2018 ~ Sep 2018
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
PakistanPakistan
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
QatarQatar
Jun 2016 ~ Jan 2017 Sep 2016 ~ Oct 2016
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017
Jul 2018 ~ Sep 2018
Jul 2018 ~ Sep 2018
RussiaRussia
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Saudi ArabiaSaudi Arabia
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jul 2015 ~ May 2016 Jan 2014 ~ Aug 2019
Jul 2015 ~ May 2016 Jan 2014 ~ Aug 2019 Apr 2016 ~ Jul 2017
May 2016 ~ Apr 2019 Jul 2015 ~ May 2016 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Jun 2016 ~ May 2017 Jun 2016 ~ Jan 2017 Sep 2016 ~ Oct 2016 Apr 2016 ~ Jul 2017
May 2016 ~ Apr 2019 Jan 2017 ~ Jan 2017 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Jun 2016 ~ May 2017 Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017 Jan 2017 ~ Feb 2017 Apr 2016 ~ Jul 2017
May 2016 ~ Apr 2019 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Jun 2016 ~ May 2017 Apr 2016 ~ Jul 2017
May 2016 ~ Apr 2019 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Oct 2017 ~ Oct 2017
May 2016 ~ Apr 2019 Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019 Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
May 2016 ~ Apr 2019 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023 Aug 2023 ~ Sep 2023
Jun 2020 ~ Oct 2023 Aug 2023 ~ Sep 2023
South KoreaSouth Korea
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
TurkeyTurkey
Jun 2016 ~ Jan 2017 Sep 2016 ~ Oct 2016
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
United Arab EmiratesUnited Arab Emirates
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017
Jan 2014 ~ Aug 2019 Aug 2017 ~ Oct 2017
Jan 2014 ~ Aug 2019 Aug 2017 ~ Oct 2017
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023 May 2023 ~ May 2023
Jun 2020 ~ Oct 2023
United StatesUnited States
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019 Apr 2016 ~ Jul 2017
Jan 2014 ~ Aug 2019 Sep 2016 ~ Oct 2016 Apr 2016 ~ Jul 2017
Jan 2014 ~ Aug 2019 Apr 2016 ~ Jul 2017
Jan 2014 ~ Aug 2019 Apr 2016 ~ Jul 2017
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2020 ~ Jan 2020
Jun 2023 ~ Aug 2023
Jun 2023 ~ Aug 2023
YemenYemen
Jul 2018 ~ Sep 2018
Jul 2018 ~ Sep 2018
ZimbabweZimbabwe
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Targeted Sectors
Recent Activities
Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.