Among key advancements, this new OilRig attack campaign introduced a variety of new command and control (C&C) and data exfiltration capabilities using Google Drive, SmartFile, a file sharing and transfer solution, and an ISAPI filter to extend the functionality of Microsoft Internet Information Services (IIS) servers. In total, the attackers used about 20 different tools – some were off-the-shelf, dual-purpose utilities, while others were previously unseen malware. Leave this presentation armed with technical details of how sophisticated attackers operate along with knowledge that can help security professionals deal with this threat actor in the future.