malware

OopsIE

S0264 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[OopsIE](https://attack.mitre.org/software/S0264) is a Trojan used by [OilRig](https://attack.mitre.org/groups/G0049) to remotely execute commands as well as upload/download files to/from victims. (Citation: Unit 42 OopsIE! Feb 2018)

Actors that use this

1 tracked actor

OilRig (APT34)ATT&CK-attributed