MITRE ATT&CKgroup

G0021 Molerats

Published 2017-05-31 Modified 2026-07-31 Official page ↗
Domain
enterprise
Aliases
Operation Molerats, Gaza Cybergang
Version
2.1
Created
2017-05-31

Description

Molerats is an Arabic-speaking, politically-motivated threat group that has been operating since 2012. The group's victims have primarily been in the Middle East, Europe, and the United States.

Related

Uses · MITRE ATT&CK (22)

  • T1027.015 Compression sub-technique
  • S0553 MoleNet software (malware)
  • S0546 SharpStage software (malware)
  • S0547 DropBook software (malware)
  • S0543 Spark software (malware)
  • T1059.007 JavaScript sub-technique
  • T1204.001 Malicious Link sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1566.002 Spearphishing Link sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1553.002 Code Signing sub-technique
  • T1218.007 Msiexec sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • S0012 PoisonIvy software (malware)
  • S0062 DustySky software (malware)
  • T1057 Process Discovery technique
  • T1105 Ingress Tool Transfer technique

References