OilRig uses ISMDoor variant; Possibly Linked to Greenbug Threat Group
released on 2017-07-27 @ 01:41:38 PM
Unit 42 has discovered activity involving threat actors responsible for the OilRig campaign with a potential link to a threat group known as GreenBug. Symantec first reported on this group back in January 2017, detailing their operations and using a custom information stealing Trojan called ISMDoor.