Skip to content

Molerats

Molerats is an Arabic-speaking, politically-motivated threat group that has been operating since 2012. The group's victims have primarily been in the Middle East, Europe, and the United States.

ATT&CK ID: G0021
Techniques: 12
Tools: 6

Also tracked as Operation Molerats · Gaza Cybergang

Techniques

Initial Access

Execution

Scheduled Task/Job Command and Scripting Interpreter User Execution

Persistence

Scheduled Task/Job Boot or Logon Autostart Execution

Privilege Escalation

Scheduled Task/Job Boot or Logon Autostart Execution

Stealth

Obfuscated Files or Information Deobfuscate/Decode Files or Information System Binary Proxy Execution

Defense Impairment

Subvert Trust Controls

Credential Access

Credentials from Password Stores

Discovery

Process Discovery

Command and Control

Ingress Tool Transfer

Software

DropBook · DustySky · MoleNet · PoisonIvy · SharpStage · Spark

MITRE ATT&CK All threat actors