Gold Sahara is an advanced persistent threat (APT) that has been active since at least 2014, targeting organizations in various industries such as finance and government agencies. The group\'s primary objective appears to be stealing sensitive information for financial gain through the use of spear-phishing emails or other social engineering tactics. Gold Sahara is known to have been active in North Africa, specifically Morocco, Algeria, Tunisia, Libya and Egypt.
Techniques, tactics and practices:
Gold Sahara is a highly sophisticated threat actor that uses various techniques to achieve its objectives. Some of these include spear-phishing emails, social engineering tactics such as impersonation and baiting, exploitation of vulnerabilities in software or systems, use of malware and other types of malicious code, and the ability to remain undetected for extended periods of time through various evasion techniques. Gold Sahara is also known to have a strong focus on targeted attacks, meaning they will carefully research their targets before launching an attack, in order to increase the likelihood of success.