APT34

APT34, also known as OilRig and other aliases, is a suspected Iranian threat group linked to long-term cyber espionage operations targeting sectors such as financial, government, energy, and telecommunications, primarily in the Middle East. The group is believed to operate on behalf of the Iranian government, utilizing infrastructure and targeting patterns consistent with nation-state interests. APT34 has employed techniques like supply chain attacks and leveraged vulnerabilities such as CVE-2017-11882 to deploy malware like POWRUNER and BONDUPDATER.