ATT&CK ReferencesNSA NCSC Turla OilRig

NSA NCSC Turla OilRig

NSA/NCSC. (2019, October 21). Cybersecurity Advisory: Turla Group Exploits Iranian APT To Expand Coverage Of Victims. Retrieved October 16, 2020.

Techniques2

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1584.003 Virtual Private Server	GroupTurla	Turla has used the VPS infrastructure of compromised Iranian threat actors. NSA NCSC Turla OilRig
T1588.001 Malware	GroupTurla	Turla has used malware obtained after compromising other threat actors, such as OilRig. NSA NCSC Turla OilRig Recorded Future Turla Infra 2020

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.