Menorah

The Menorah malware, a novel and malicious software, was discovered in October 2023 as part of a cyberespionage operation conducted by Iranian advanced persistent threat (APT) group, OilRig. Also known as APT34, Helix Kitten, Hazel Sandstorm, and Cobalt Gypsy, the group has been strengthening its cyberespionage arsenal with this new malware, which was deployed in a spear-phishing campaign. The operation targeted various entities, including a Saudi Arabia-based organization, according to reports from The Hacker News. Cybersecurity company Trend Micro attributed the deployment of Menorah to APT34 in September 2023. The Menorah malware is a sophisticated tool capable of identifying the target's machine, reading and uploading files from the machine, and downloading other files or malware. This marked an escalation in the group's tactics, demonstrating their ability to develop and deploy advanced malware for specific espionage purposes. This development comes amidst a backdrop of increased sanctions against the APT for its cyberespionage activities, particularly those targeting Saudi Arabia and UAE. The introduction of Menorah into OilRig's arsenal underscores the group's ongoing efforts to bolster its capabilities, despite international pressure and scrutiny. With these continuous advancements, it is crucial for organizations to remain vigilant and ensure robust cybersecurity measures are in place.