APT34 (OilRig) Supply Chain Attack

An Iranian nation-state threat actor, APT34 (OilRig), conducted a supply chain attack against an IT company in the region with the objective of gaining access to government targets. The attackers used a malicious IT job recruitment form as a lure, which executed information-stealing malware when opened. The malware collected sensitive information and credentials, enabling access to the IT company's client networks. The attackers then targeted government clients and leveraged the victim organization's email infrastructure for command-and-control (C2) communications and data exfiltration.