VERY IMPORTANT

Since July 2020, the Zscaler ThreatLabZ team has observed an increase in targeted attacks against multiple supply chain-related organizations in the oil and gas sector in the Middle East. We discovered multiple instances of malicious PDF files sent as email attachments and were used to distribute an information-stealing Trojan, AZORult, to these organizations. In this blog, we describe the details of this campaign, explaining the attack vectors, the malware distribution strategy, and the threat attribution.