OilRigs, a hacking group linked to Iran's Ministry of Intelligence and Security, breached a Middle Eastern government network and maintained access for 8 months in 2023. They used various tools and techniques to steal data, including a backdoor called 'PowerExchange' and other malware such as Backdoor.Tokel and Infostealer.Clipog. Despite facing a leak of their toolkit in 2019, the group remained active and had the ability to perform reconnaissance, lateral movement, and data exfiltration during their attack.