BlackOasis — ATT&CK profile, 1 technique

Overview

BlackOasis is a Middle Eastern threat group that is believed to be a customer of Gamma Group. The group has shown interest in prominent figures in the United Nations, as well as opposition bloggers, activists, regional news correspondents, and think tanks. A group known by Microsoft as NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified.

Naming & attribution

It uses 1 documented ATT&CK technique — more than 2% of the 174 groups tracked here.

Who calls this group what — MITRE lists each alias with the report that used it, but not which vendor coined it.
Name	First reported by
BlackOasis	Kaspersky Lab's Global Research & Analysis Team

TTPs — 1 technique across 1 tactic

Stealth

T1027 Obfuscated Files or Information

Reporting (3)

BlackOasis APT and new targeted attacks leveraging zero-day exploit — Kaspersky Lab's Global Research & Analysis Team
Middle Eastern hacking group is using FinFisher malware to conduct international espionage — Bing, C
APT Trends report Q2 2017 — Kaspersky Lab's Global Research & Analysis Team