Purple Teaming with MITRE ATT&CK in the Oil and Gas Sector: MuddyWater and OilRig/APT34

Cyberattacks have increased significantly against the energy sector as geopolitical tensions have risen, and nation-state-sponsored espionage groups have focused their attacks on oil, gas, and electric companies for over a decade.

MuddyWater and OilRig are Iran-based nation-state sponsored intrusion sets that have targeted organizations globally but have the heaviest focus on other nations in the Middle East. MuddyWater has focused targeting on energy (oil), telecommunications and government IT services sectors, while OilRig/APT34 has targeted a variety of sectors beyond just energy, to include financial, government, chemical, and telecommunications.

This demo will include a technical overview of campaigns from both intrusion sets. Join AttackIQ researchers and experts to explore how these adversary campaign emulation attack graphs in the AttackIQ Security Optimization Platform can help you validate your security effectiveness against real-world campaigns from these adversaries.