Unit 42
OilRig Deploys “ALMA Communicator” – DNS Tunnelin…
Unit 42 observed a new version of the Clayslide delivery document used to install a new custom Trojan whose developer calls “ALMA Communicator”. …
Unit 42
(
Unit 42
OilRig Uses ISMDoor Variant; Possibly Linked to Greenbu…
New research from Unit 42: OilRig uses ISMDoor variant; possibly linked to Greenbug threat group. …
Unit 42
OilRig Actors Provide a Glimpse into Development and Te…
Unit 42 researches the techniques used by attackers to avoid antivirus detection and successfully deliver OilRig campaign attacks. …
Unit 42
OilRig Malware Campaign Updates Toolset and Expands Targets
Since our first published analysis of the OilRig campaign in May 2016 , we have continued to monitor this group for new activity. In recent weeks we’ve discovered that the group have been active …
Unit 42
The OilRig Campaign: Attacks on Saudi Arabian Organizat…
In May 2016, Unit 42 observed targeted attacks primarily focused on financial institutions and technology organizations within Saudi Arabia. Artifacts identified within the malware samples related to …