Automation · API / MCP 中文

Group profile · G0063

BlackOasis

BlackOasis is a Middle Eastern threat group that is believed to be a customer of Gamma Group. The group has shown interest in prominent figures in the United Nations, as well as opposition bloggers, activists, regional news correspondents, and think tanks. A group known by Microsoft as NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified.

ATT&CK G0063 Confidence High · 100 Source src_mitre_attck_enterprise Status active
All2018

BlackOasis is a Middle Eastern threat group that is believed to be a customer of Gamma Group. The group has shown interest in prominent figures in the United Nations, as well as opposition bloggers, activists, regional news correspondents, and think tanks. 1 2 A group known by Microsoft as NEODYMIUM is reportedly associated closely with BlackOasis operations, but evidence that the group names are aliases has not been identified. 3

  1. Securelist BlackOasis Oct 2017
  2. Securelist APT Trends Q2 2017
  3. CyberScoop BlackOasis Oct 2017

Claims and citations

Every claim comes from a writer; provenance is the writer's assertion, not a review verdict from this directory. Validity reads by citation year.

predicateobjectValidConf.Evidence
also_known_asBlackOasis— → …100src_mitre_attck_enterprise
uses_techniquetech_t10272018 → …100src_mitre_attck_enterprise

Technique use

ATT&CKTechniqueplatforms
T1027Obfuscated Files or Information—

Aliases

BlackOasis

Reading and review

Records are auto-ingested and not human-reviewed. Confidence is the writer's 0–100 value; bands split at ≥80 / 50–79 / <50 into high / medium / low. The four trust axes (synthetic, lifecycle, band, source count) stay separate and never merge into one score.

Corrections