Loading threat actor…
Oath Keepers is a U.S.-based far-right anti-government extremist movement founded by Stewart Rhodes. The organization has drawn members from military, law-enforcement, and first-responder backgrounds and is known for mobilizing around conspiracy narratives, anti-government grievances, and claims of defending the Constitution against perceived domestic enemies. It became especially prominent for its role in the January 6, 2021 attack on the U.S. Capitol, where federal prosecutors established that Rhodes orchestrated the group’s violent actions; Rhodes was later convicted of seditious conspiracy. The movement has operated alongside or in parallel with other far-right extremist milieus, including interactions within broader January 6 mobilization networks that also involved groups such as the Proud Boys. Available reporting also links a Florida chapter figure to operation of a QAnon-affiliated site, illustrating overlap between Oath Keepers-associated personnel and adjacent extremist ecosystems. Based on the available facts, Oath Keepers is best characterized as a domestic extremist organization engaged in politically motivated mobilization and violent action rather than a cyber threat actor with established intrusion, malware, or extortion operations.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 distinct technique observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Far-right extremist movement tied to the Jan. 6 Capitol attack; its founder Stewart Rhodes was convicted of seditious conspiracy for orchestrating members’ violent actions.
Far-right militia group discussed as helping organize participation in January 6 and planning for follow-on mobilization after the attack.
Extremist militia group discussed in connection with a Florida chapter director allegedly operating a QAnon-affiliated website, illustrating ties between militia and extremist online ecosystems.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.