New: 2026 Gartner® Market Guide for Adversarial Exposure Validation
Learn More
Cymulate named a Customers' Choice in 2025 Gartner® Peer Insights™
Learn More
New Research: Azure Arc Privilege Escalation & Identity Takeover
Learn More
An Inside Look at the Technology Behind Cymulate
Learn More

Operation Silent Watch

February 28, 2023

Threat actors launched Operation Silent Watch utilizing the OxtaRAT backdoor for desktop surveillance and remote access for information gathering. The threat actor targeted independent media dissidents and human rights organizations within Azerbaijan. The OxtaRAT backdoor supports multiple features and is a polyglot file that combines both AutoIt scripts and images.