RISI

← Back to database

Gaza Cybergang attacks Oil and Gas facilities

Event Year
2017
Reliability
Confirmed
Country
Multiple
Industry
Petroleum
Attack Type
Targeted Attack

Description

Kaspersky and ClearSky tracked the Gaza Cybergang (also Molerats) targeting oil-and-gas, financial-services, and government entities across the Middle East from 2012 onward, with a 2017 wave aimed specifically at Middle Eastern energy companies. The toolkit relied on document-based spear-phishing and custom RATs (Downeks, Quasar).

Impact

The campaign was assessed as espionage-focused; no public reporting documents OT-process disruption. Several oil-and-gas operators acknowledged remediation costs.

Sources

  • Study on the Evaluation of Risks of Cyber-Incidents and on Costs of Preventing Cyber-Incidents in the Energy Sector - Ecofys

Source list compiled from OTCAD (Stash Kempinski / Secura, GPL-3.0). Description is risidata's own prose.