Operation Molerats: Middle East Cyber Attacks Using Poison Ivy | FireEye Blog

FireEye details 'Operation Molerats', an active campaign using the Poison Ivy RAT against Middle Eastern and U.S. targets; the report includes sample hashes, PIVY config/passwords and key-files, C2 domains and IPs, delivery methods (spear-phishing with weaponized RARs/hosted links), Arabic decoy documents, and detection artifacts including a YARA signature to support detection and attribution.