Cybersecurity incident
Date: 2020-07-22 00:00:00
Affected organization: A telecom company in the Middle East
Affected country: Undetermined
Industry: Information
Event type: Exploitive
Event subtype: Exploitation of End Hosts
Motive: Political-Espionage
Actor: Ministry of Intelligence and Security (MOIS) (APT 34 OilRig)
Actor type: Nation-State
Actor country: Iran (Islamic Republic of)
Description: Researchers from Palo Alto Networks discover a series of cyberattacks on a telecom company in the Middle East signaling the return of the OilRig APT. The attacks also revealed a revised backdoor tool in the group's arsenal, called RDAT.