OilRig
MITRE G0049Also known as APT34
Reports
4
First seen
Mar 12, 2026
Last seen
Aug 17, 2026
Motivation
Espionage
Targeting
Sectors
Victim regions
×3×3
Israel×3
Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.
Top ATT&CK techniques
T1071.001 Application Layer Protocol: Web Protocols ×2T1566 Phishing ×2T1195 Supply Chain Compromise ×2T1071 Application Layer Protocol ×2T1566.002 Phishing: Spearphishing Link ×2T1555 Credentials from Password Stores ×1T1218 System Binary Proxy Execution ×1T1003 OS Credential Dumping ×1T1219 Remote Access Software ×1T1087 Account Discovery ×1T1041 Exfiltration Over C2 Channel ×1T1018 Remote System Discovery ×1
Indicators
filename ×20domain ×18hash_md5 ×3ip_v4 ×3ip_v6 ×3url ×1
Indicator values are available on Pro and via the API.
Recent reports
High