Loading threat actor…
The Oath Keepers are a far-right U.S. extremist movement. The provided content identifies Stewart Rhodes as the founder and states he was convicted of seditious conspiracy for orchestrating the group’s violent actions during the January 6, 2021 Capitol attack, though he did not enter the Capitol himself. The group is repeatedly referenced alongside the Proud Boys in reporting on organization and mobilization related to January 6, including how rioters and affiliated actors coordinated travel to Washington, D.C. The content also notes that the House January 6 Committee investigated Oath Keepers-related activity as part of its broader review of extremist involvement and the role of social media platforms in the attack. Separately, reporting on the 2021 Epik breach cited by SITE Intelligence Group said leaked data showed that a man listed as a director of the Florida chapter of the Oath Keepers had been running the QAnon-affiliated site QAlerts. In 2025, Rhodes was released from prison as part of President Trump’s clemency actions for Jan. 6 defendants, and experts cited in the content warned that such actions could create a more permissive environment for far-right extremist groups, including the Oath Keepers, to regroup. Known alias in the provided content: oath_keepers.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 distinct technique observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Far-right extremist movement tied to the Jan. 6 Capitol attack; its founder Stewart Rhodes was convicted of seditious conspiracy for orchestrating members’ violent actions.
Far-right militia group discussed as helping organize participation in January 6 and planning for follow-on mobilization after the attack.
Extremist militia group discussed in connection with a Florida chapter director allegedly operating a QAnon-affiliated website, illustrating ties between militia and extremist online ecosystems.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.