CHRYSENE
CHRYSENE is classified as state-sponsored.
- Malware families
- 30
- Suspected state sponsor
- Unknown
- Also known as
- 2
Adversaries abusing ICS (based on Dragos Inc adversary list). This threat actor targets organizations involved in oil, gas, and electricity production, primarily in the Gulf region, for espionage purposes. According to one cybersecurity company, the threat actor “compromises a target machine and passes it off to another threat actor for further exploitation.”
The group is suspected of operating with the support of Unknown.
The group is associated with 30 malware families.
Also known as: OilRig, Greenbug
The group is associated with 30 malware families.
Malware families
- Alma Communicator
- BONDUPDATER
- GoogleDrive RAT
- Hawking
- Helminth
- ISMAgent
- ISMDoor
- jason
- Karkoff
- LONGWATCH
- Mango
- Nautilus
- Neuron
- OilRig
- OopsIE
- PICKPOCKET
- POWRUNER
- pupy
- QUADAGENT
- RDAT
- RedCap
- Saitama Backdoor
- SideTwist
- Solar
- SpyNote
- STEALHOOK
- TONEDEAF
- TwoFace
- VALUEVAULT
- ZeroCleare
Published reports on this actor:
- https://dragos.com/adversaries.html
- https://dragos.com/media/2017-Review-Industrial-Control-System-Threats.pdf
- https://www.cfr.org/interactive/cyber-operations/chrysene
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.