Molerats__2016__Operation_DustySky_TLP_WHITE.pdf

Clearsky’s "Operation DustySky" report documents a targeted campaign by the Molerats that delivered a multi-stage .NET backdoor (DustySky/NeD) via phishing and poisoned installers; the report provides detailed TTPs, malware component analysis (dropper, core, keylogger), C2 communication patterns, infrastructure mappings, IoCs (domains, IPs, hashes, pdbs, mutexes) and attribution evidence pointing to Gaza-based actors.