BlackOasis is a cyber espionage group that first emerged with documented activity in June 2015, utilizing zero-day exploits to deliver surveillance malware. The group is assessed with moderate confidence to be of Middle Eastern origin and is primarily motivated by intelligence collection for espionage purposes. A distinguishing characteristic of BlackOasis is its consistent use of zero-day vulnerabilities in its campaigns, having exploited at least five such flaws since its inception. While sometimes associated with the codename NEODYMIUM by Microsoft, this is not a confirmed alias for BlackOasis, though the group is tracked as G0063 in the MITRE ATT&CK framework.

Aliases del actor

G0063