Sign in Subscribe

OilRig

OilRig (APT34, Helix Kitten, COBALT GYPSY) is an Iranian state-sponsored threat actor targeting Middle East governments, telecom, and finance through DNS hijacking and custom backdoors, often operating alongside MuddyWater and APT33 in coordinated Iranian campaigns.

Surge In Cyber Threats - Middle East Activities

Threat Intelligence

Surge In Cyber Threats - Middle East Activities

Iran's IRGC- and MOIS-aligned APTs, including APT34 (OilRig) and MuddyWater, run synchronized espionage, DDoS, and ICS/OT intrusions alongside hacktivist proxies during the Israel-Iran conflict, with confirmed access claims against Gulf energy and water utilities.

Trending Topics

Iran-US/Israel Conflict

Trending Topics

Iranian APT escalation (MuddyWater, OilRig, APT33) targets critical infrastructure post-Operation Lion's Roar. Qilin and INC Ransom target law and accounting firms. Fake Zoom/Google Meet pages deploy Teramind monitoring software.

Trending Topics

Trending Topics

DHS warns of pro-Iranian hacktivist surge distinct from APT33 and APT34's espionage capabilities. House bans WhatsApp on official devices. Echo Chamber attack jailbreaks LLMs via context poisoning. XDigo malware hits Eastern European governments.