170/69 Wednesday, March 25, 2026
Cybersecurity firm Resecurity has reported the discovery of threat activity linked to a cyber threat group known as Nasir Security, which is targeting energy sector organizations across the Middle East. The activity comes amid heightened regional security tensions, particularly within Gulf Cooperation Council (GCC) countries. The energy sector remains a high-value target due to its strategic importance and the potential impact of disruptions, especially in light of previous incidents such as the closure of the Strait of Hormuz and attacks on energy infrastructure using drones and missiles.
According to Resecurity’s analysis, the group is leveraging supply chain attack techniques, targeting third-party service providers such as engineering, security, and construction firms to gain indirect access to their primary targets. Although the stolen data originates from external partners, it includes highly sensitive and legitimate information such as project blueprints, contracts, and risk assessment reports. This information could be used to identify weaknesses in energy infrastructure and support further stages of attack. Identified targets include Dubai Petroleum (UAE), CC Energy Development (Oman), oil and gas organizations in Iraq, and Al-Safi Oil Company (Saudi Arabia).
Technically, the attackers employ a combination of tactics, including Business Email Compromise (BEC) through targeted phishing campaigns, impersonation, exploitation of publicly exposed systems, and data extraction from misconfigured cloud services. The activity also reflects a hybrid approach combining cyber operations with information operations to amplify strategic impact. However, Resecurity cautions that attribution should be handled carefully, as attackers may use false flag techniques to mislead investigators. Looking ahead, IT and OT supply chain attacks are expected to remain a key vector for achieving large-scale disruption, often in conjunction with psychological and influence operations.