Back Gbhackers

Libyan Refinery Targeted in Prolonged Spy Campaign With AsyncRAT

Gbhackers •Mayura Kathir • March 23, 2026

A targeted cyber espionage campaign against Libyan organizations has compromised an oil refinery, a telecommunications provider, and a state institution between November 2025 and February 2026. The campaign stands out due to its focus on critical infrastructure, particularly Libya’s oil sector. The country produced around 1.37 million barrels of oil per day in 2025, its […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Coordinated Cyber Espionage Targets Libyan Oil Sector Between November 2025 and February 2026, a coordinated cyber espionage campaign targeted a Libyan oil refinery, a telecommunications organization, and a state institution. The attacks utilized AsyncRAT, a publicly available remote access Trojan known for its use by state-sponsored threat groups. This campaign specifically aimed at Libya's critical infrastructure, raising alarms about the security of the oil sector, which produced approximately 1.37 million barrels of oil per day in 2025. The scope of the attacks indicates a significant threat to national security and economic stability. As of March 23, 2026, the situation remains under investigation, with no confirmed attribution of the attackers. 2 sources 69

Extracted Entities

Libyan Refinery Targeted in Prolonged Spy Campaign With AsyncRAT

The full story

Extracted Entities

Attack Types (1)

Industries (1)

Malware (1)