Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: Operation Molerats, Gaza Cybergang
16
techniques
6
software
11,114
corpus matches
profile
Molerats is an Arabic-speaking, politically-motivated threat group that has been operating since 2012. The group's victims have primarily been in the Middle East, Europe, and the United States.
techniques
16 attributed · most-instrumented first
software
6 malware & tools attributed
PoisonIvy
S0012
DustySky
S0062
Spark
S0543
SharpStage
S0546
DropBook
S0547
MoleNet
S0553
read this carefully
11,114 corpus matches is not attribution
That count is indicators which exhibit techniques Molerats is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
+4 more techniques
showing 30 of 11,114
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.