The Iranian state-sponsored threat actor known as OilRig has deployed three new downloader malware, named ODAgent, OilCheck, and OilBooster, to maintain persistent access to victim organizations in Israel, utilizing legitimate cloud service APIs for command-and-control communication and data exfiltration.
View full story…