OilRig Cluster
Suspected state sponsor: Islamic Republic of IranThe OilRig Cluster, associated with the Iranian Ministry of Intelligence (MOIS), is also among the most notorious advanced persistent threats. Active in cyber industrial espionage, its campaigns are usually destructive. The prime targets of OilRig are countries in the Middle East, though Western entities and governments, particularly in the US, are occasionally targeted. OilRig has targeted various sectors including financial services, energy, chemical, and telecommunication enterprises.
OilRig threat actors utilize a combination of social engineering and supply chain attacks to escalate their level of access.
observatory results
APT34
APT34 is named by Mandiant and at the moment 21 indexed report with 515 related IOCs
Cobalt Gypsy
Cobalt Gypsy is named by SecureWorks and at the moment 1 indexed report with 33 related IOCs
Crambus
Crambus is named by Symantec and at the moment 1 indexed report with 29 related IOCs
EUROPIUM
EUROPIUM is named by Microsoft and at the moment 1 indexed report with 20 related IOCs
Greenbug
Greenbug is named by Symantec and at the moment 8 indexed report with 157 related IOCs
Helix Kitten
Helix Kitten is named by CrowdStrike and at the moment 1 indexed report with 0 related IOCs
OilRig
OilRig is named by Palo Alto and at the moment 18 indexed report with 312 related IOCs
Scarred Manticore
Scarred Manticore is named by Check Point and at the moment 1 indexed report with 3 related IOCs
Most Common Tactics
Targeted Regions

AfghanistanAfghanistan
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019

AlbaniaAlbania
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022

AustraliaAustralia
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017

BahrainBahrain
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017
Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019 Jun 2018 ~ Nov 2018
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019 Jun 2018 ~ Nov 2018
Nov 2017 ~ Sep 2019
Sep 2019 ~ Sep 2019 Nov 2017 ~ Sep 2019

BangladeshBangladesh
Apr 2017 ~ Jul 2017
Apr 2017 ~ Jul 2017

EuropeEurope
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019

FranceFrance
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019

GermanyGermany
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019

IndiaIndia
Apr 2017 ~ Jul 2017
Apr 2017 ~ Jul 2017

IranIran
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017 Apr 2017 ~ Jul 2017
Apr 2017 ~ Jul 2017
Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019

IraqIraq
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017 Apr 2017 ~ Jul 2017
Apr 2017 ~ Jul 2017
Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Jul 2018 ~ Sep 2018 Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023

IsraelIsrael
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017 Sep 2016 ~ Oct 2016
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Apr 2017 ~ Apr 2017 Nov 2016 ~ Jan 2017 Apr 2017 ~ Jul 2017
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Apr 2017 ~ Jul 2017
Jan 2014 ~ Aug 2019 Oct 2017 ~ Oct 2017
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023
Jun 2020 ~ Oct 2023 Feb 2021 ~ Sep 2023

JordanJordan
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Apr 2022 ~ May 2022 Apr 2022 ~ May 2022 Apr 2022 ~ May 2022 Apr 2022 ~ Jun 2022
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023 Apr 2022 ~ May 2022 Apr 2022 ~ Jun 2022
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023

KuwaitKuwait
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017
Jul 2018 ~ Sep 2018 Jun 2018 ~ Nov 2018
Jul 2018 ~ Sep 2018 Jun 2018 ~ Nov 2018
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023

LebanonLebanon
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017
Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Feb 2020 ~ Mar 2020 Jan 2020 ~ Mar 2020
Jan 2021 ~ Apr 2021
Jan 2021 ~ Apr 2021

Middle EastMiddle East
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Aug 2017 ~ Aug 2017
Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Aug 2018 ~ Nov 2018 Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Dec 2022 ~ Feb 2023

OmanOman
Jul 2018 ~ Sep 2018
Jul 2018 ~ Sep 2018
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023

PakistanPakistan
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019

QatarQatar
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017 Sep 2016 ~ Oct 2016
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017
Jul 2018 ~ Sep 2018
Jul 2018 ~ Sep 2018

RussiaRussia
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019
Nov 2017 ~ Sep 2019

Saudi ArabiaSaudi Arabia
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jul 2015 ~ May 2016 Jan 2014 ~ Aug 2019
Jul 2015 ~ May 2016 Jan 2014 ~ Aug 2019
Jul 2015 ~ May 2016 Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Jun 2016 ~ May 2017 Jun 2016 ~ Jan 2017
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Jun 2016 ~ May 2017 Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017 Sep 2016 ~ Oct 2016
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Jun 2016 ~ May 2017 Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017 Jan 2017 ~ Feb 2017 Apr 2017 ~ Jul 2017
Jun 2016 ~ Sep 2017 Jan 2014 ~ Aug 2019 Apr 2017 ~ Jul 2017
Jan 2014 ~ Aug 2019 Oct 2017 ~ Oct 2017
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023 Aug 2023 ~ Sep 2023
Jun 2020 ~ Oct 2023 Aug 2023 ~ Sep 2023

South KoreaSouth Korea
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019

TurkeyTurkey
Jun 2016 ~ Jan 2017
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017 Sep 2016 ~ Oct 2016
Jun 2016 ~ Jan 2017 Nov 2016 ~ Jan 2017
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022

United Arab EmiratesUnited Arab Emirates
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017
Jan 2014 ~ Aug 2019 Nov 2016 ~ Jan 2017
Jan 2014 ~ Aug 2019 Aug 2017 ~ Oct 2017
Jan 2014 ~ Aug 2019 Aug 2017 ~ Oct 2017
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jul 2018 ~ Sep 2018 Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Apr 2020 ~ Sep 2022
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Apr 2020 ~ Sep 2022 Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023 May 2023 ~ May 2023
Jun 2020 ~ Oct 2023

United StatesUnited States
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019 Sep 2016 ~ Oct 2016
Jan 2014 ~ Aug 2019 Apr 2017 ~ Jul 2017
Jan 2014 ~ Aug 2019 Apr 2017 ~ Jul 2017
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2014 ~ Aug 2019 Nov 2017 ~ Sep 2019
Jan 2020 ~ Jan 2020
Jun 2023 ~ Aug 2023
Jun 2023 ~ Aug 2023

YemenYemen
Jul 2018 ~ Sep 2018
Jul 2018 ~ Sep 2018

ZimbabweZimbabwe
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Jan 2014 ~ Aug 2019
Targeted Sectors
Recent Activities
Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.