G00218 cited sources

Molerats

Also tracked as Operation Molerats, Gaza Cybergang

Techniques Mapped16

Tools & Malware6

Campaigns TrackedNone published

Last Updated (MITRE)Jul 31, 2026

Description (MITRE ATT&CK)

Molerats is an Arabic-speaking, politically-motivated threat group that has been operating since 2012. The group's victims have primarily been in the Middle East, Europe, and the United States.

Known Techniques by Tactic

Execution (6)

Stealth (3)

Associated Tools & Malware

MoleNet (malware)Spark (malware)DustySky (malware)DropBook (malware)SharpStage (malware)PoisonIvy (malware)

Regions Mentioned

Middle EastUnited StatesEurope

Derived from MITRE ATT&CK's own description text for this group — not a confirmed, exhaustive targeting assessment.

Seraph Context

Organisational Relevance

Shown when this actor's known techniques match your monitored environment.

Exploited CVE Correlation

Surfaced when a technique used by this actor maps to a tracked CISA KEV entry.

Sector & Regional Signal

Derived from MITRE's own published description text, never asserted beyond it.

Watchlist

Signed-in customers can track this actor and be notified of profile updates.

Is this actor relevant to your environment?

Match this actor's known techniques against the technologies you run inside Seraph CTI, and get notified if their profile changes.

Explore Seraph CTI Back to Threat Actors

Molerats

Description (MITRE ATT&CK)

Known Techniques by Tactic

Execution (6)

Stealth (3)

Associated Tools & Malware

Regions Mentioned

Seraph Context

Organisational Relevance

Exploited CVE Correlation

Sector & Regional Signal

Watchlist

Other extensively documented threat actors.

Is this actor relevant to your environment?

Persistence (2)

Privilege Escalation (2)

Initial Access (2)

Command And Control (1)

Defense Impairment (1)

Discovery (1)

Credential Access (1)