Virus That Haunted Aramco In 2012 Is Back | WHAT REALLY HAPPENED


Virus That Haunted Aramco In 2012 Is Back

A variant of the Shamoon malware that hit Saudi Aramco’s servers six years ago is back, Axios reports, citing a release from the cybersecurity unit of Alphabet, Chronicle. According to the Chronicle release, the company had detected a file infected with Shamoon in its database VirusTotal.

The malware, Chronicle said, was uploaded from Italy and is different from the previous two variants. Those moved through networks via pre-programmed credentials while this one stays on the computer it is installed on first. There is no command and control infrastructure that would allow the attackers to communicate with the virus, and what the virus does this time is encrypt all files irreversibley rather than replacing them with politically significant images, Axios reports.

While the cybersecurity experts at Chronicle figure out what the malware is all about this time, they do note it comes on the heels of a report from Italy’s oilfield services major Saipem that it had become the target of a cyberattack, with the most severe blow suffered by its network in the Middle East.

Comments

SHARE THIS ARTICLE WITH YOUR SOCIAL MEDIA