Spearal (25c85bfb-3833-4c57-867a-b7d9ff6c5a40)
Spearal is a .NET-based backdoor malware linked to the OilRig Iranian espionage group, which uses DNS tunneling for command and control communication.[Check Point Research September 11 2024]
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
OilRig (d01abdb1-0378-4654-aa38-1a4a292703e2) | Tidal Groups | Spearal (25c85bfb-3833-4c57-867a-b7d9ff6c5a40) | Tidal Software | 1 |