Campaigns
Cyber Risk to the Oil and Gas Industry

Cyber Risk to the Oil and Gas Industry

gasoilpipelineIIoTICS
There has been significant interest within the offshore oil and gas industry to utilise Industrial Internet of Things (IIoT) and Industrial Cyber-Physical Systems (ICPS). There has also been a corresponding increase in cyberattacks targeted at oil and gas companies.

Indicators of Compromise

oorgans.com
zandelshop.com
zeverco.com
service-essential.com
simsoshop.com
service-eset.com
service-explorer.com
qualitweb.com
suncocity.com
service-norton.com

APT Groups8

CHRYSENEIran, Islamic Republic of
ParastooCharming KittenFlying KittenEducated ManticoreCobalt GypsyTimberwormATK 40Scarred ManticoreOilRigChryseneMagic HoundTEMP.BeanieNewscasterTwisted KittenStorm-0861ITG13Yellow GarudaBallistic BobcatNewsBeefRocket KittenMint SandstormEvasive SerpensPhosphorusCobalt IllusionCharmingCypressDEV-0861Group 83APT 34TunnelVisionTA452TA453EUROPIUMHelix KittenCrambusTG-2889UNC788Tarh AndishanAjax Security TeamCutting KittenIRN2APT 35Group 26Hazel SandstormYellow MaeroCobalt Mirage
LYCEUMIran, Islamic Republic of
Yellow Dev 9UNC1530Chrono KittenCobalt LyceumCobaltLyceumYellowDev9Storm-0133ATK120HEXANELyceumMYSTICDOMEHexaneSiamesekittenCOBALT LYCEUMCOBALTLYCEUMsiamesekittenSpirlinChronoKittenATK 120
Comment CrewChina
APT 1BrownFoxByzantine HadesGroup 3GIF89aByzantine CandorComment PandaShanghai GroupTG-8223Comment Crew
Energetic BearRussian Federation
Energetic BearCrouching YetiATK 6Blue KrakenDragonfly 2.0DymalloyBromineSIG39Iron LyricITG15DragonflyAnger BearKoala TeamGroup 24Iron LibertyBerserk BearTeam BearTG-4192ElectrumGhost BlizzardTeamSpy Crew
MuddyWaterIran, Islamic Republic of
Mango SandstormTA450ATK 51Boggy SerpensStatic KittenTEMP.ZagrosT-APT-14Cobalt UlsterITG17MuddyWaterSeedwormMercuryYellow Nix
Fox KittenIran, Islamic Republic of
RubidiumLemon SandstormCobalt FoxglovePioneer KittenUNC757Fox KittenParisite
MAGNALLIUMIran, Islamic Republic of
HolmiumElfinTA451Refined KittenATK 35APT 33Peach SandstormYellow OrcMagnalliumCobalt TrinityCurious Serpens
XENOTIME
ATK91TEMP.VelesATK 91XenotimeXENOTIMEG0088

Campaign Guidance

Remediation, mitigation, notes, history and related intelligence


Observed Countries10

AZ (265)
BE (492)
CN (743)
DE (29)
IR (860)
NL (486)
RU (279)
TR (731)
UA (18)
US (509)