Home / Threat actors / Molerats
Molerats G0021
Also known as: Operation Molerats, Gaza Cybergang
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
19
Techniques
6
Malware and tools
Molerats is an Arabic-speaking, politically-motivated threat group that has been operating since 2012. The group's victims have primarily been in the Middle East, Europe, and the United States.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link Execution
T1053.005 Scheduled TaskT1059.001 PowerShellT1059.005 Visual BasicT1059.007 JavaScriptT1204.001 Malicious LinkT1204.002 Malicious File Persistence
T1053.005 Scheduled TaskT1547.001 Registry Run Keys / Startup Folder Privilege Escalation
T1053.005 Scheduled TaskT1547.001 Registry Run Keys / Startup Folder Stealth
T1027.015 CompressionT1140 Deobfuscate/Decode Files or InformationT1218.007 Msiexec Defense Impairment
T1553.002 Code Signing Credential Access
T1555.003 Credentials from Web Browsers Discovery
T1057 Process Discovery Command and Control
T1105 Ingress Tool Transfer © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.