Article content

Salem Alelyani Harish Kumar G R

Abstract

The beginning of Twenty first century saw a new dimension of security, the cybersecurity. Developed countries have
started exploiting the vulnerabilities of cybersecurity to gain supremacy and influence over the rival countries. Hence,
over the past decade, malware, i.e., malicious software, has become a major security threat in regards to the cybersecurity.
The Kingdom of Saudi Arabia (KSA) has become a major target of cyber conflicts due to increased economic activity,
digital transformation, high rate of technology adoption between citizen and organizations and rise of the oil and gas
industry. However, unfortunately, there is a lack of research or scientific investigation of cyberattacks on KSA. This fact
motivated us in conducting this work. This paper presents, a case study of attacks on Saudi Organization by malwares.
We concentrate on two particular malwares: Shamoon and Ransomware. The timeline of attacks by these malware, also
presented, along with their structures and methodologies in order to shield ourselves against similar attacks in the future.

Downloads

Download data is not yet available.

References

Text: Obama’s Remarks on Cybersecurity, May 29, 2009. [Online].Available: https://www.nytimes.com/2009/05/29/us/politics/29obama.text.html (accessed Sept. 16. 2017).

O. Adebayo, M. A. Mabayoje, A. Mishhra and O. Oluwafemi,“Malware Detection, Supportive Software Agents and Its Classification Schemes,” Int. J. Netw. Secur. & its Appl. (IJNSA), vol. 4,no. 6, pp. 33-49, Nov. 2012, doi: 10.5121/ijnsa.2012.4603.

M. Baezner, P. Robin, “Hotspot Analysis: Stuxnet,” Cent.Secur. Stud. (CSS), ETH Zürich , Switzerland, Oct. 2017.[Online]. Available: https://css.ethz.ch/content/dam/ethz/special-interest/gess/cis/center-for-securities-studies/pdfs/Cyber-Reports-2017-04.pdf

K. Zetter. “Kaspersky Finds New Nation-State Attack - in Its Own Network.” June 10, 2015. [Online]. Available: https://www.wired.com/2015/06/kaspersky-finds-new-nation-state-attacknetwork/(accessed Apr. 2, 2018).

T. Pattar. “Cyber Attacks in The Middle East.” July 29, 2013.[Online]. Available: http://thesigers.com/analysis/2013/7/29/cyber-attacks-in-the-middle-east.html (accessed Dec. 31, 2017).

J. Moubarak, M. Chamoun and E. Filiol, "Comparative studyof recent MEA malware phylogeny," in 2017 2nd Int. Conf.Comput. and Commun. Syst. (ICCCS), Krakow, pp. 16-20. doi:10.1109/CCOMS.2017.8075178.

C. Bronk and E. Tikk-Ringas, “The Cyber Attack on Saudi Aramco,” Survival, vol. 55, no. 2, pp. 81-96, Apr. 2013, doi:10.1080/00396338.2013.784468.

K. Zetter. “The NSA Acknowledges What We All Feared:Iran Learns From US Cyberattacks.” Fab. 10, 2015. [Online].Available: https://www.wired.com/2015/02/nsa-acknowledges-feared-iran-learns-us-cyberattacks/ (accessed Dec. 31, 2017).

C. Helman. “The World’s Biggest Oil Companies.” Mar. 19,2015. [Online]. Available: https://www.forbes.com/sites/christopherhelman/2015/03/19/the-worlds-biggest-oil-and-gas-companies/(accessed Dec. 31, 2017).

H. Cordesman, Saudi Arabia: national security in a troubled region,Washington, D.C., USA: ABC-CLIO, 2009.

B. Acohido, “Why the Shamoon virus looms as destructive threat.” May 16, 2013. [Online]. Available: https://www.usatoday.com/story/cybertruth/2013/05/16/shamoon-cyber-warfare-hackers-anti-american/2166147/ (accessed Feb. 6, 2018).

C. Raiu, M. Hasbini, S. Belov and S. Mineev. “From Shamoon to StoneDrill.” Mar. 06, 2017. [Online]. Available: https://securelist.com/from-shamoon-to-stonedrill/77725/ (accessed Sept. 14, 2017).

Kaspersky Team. “Double trouble: A pair of wipers in Saudi Arabia.”Mar. 06, 2017. [Online]. Available: https://www.kaspersky.com/blog/shamoon-stonedrill/15170/ (accessed Jan. 6, 2018).

P. Darren. “Shamoon malware returns to again wipe Saudi-owned computers.” Dec. 02, 2016. [Online]. Available: https://www.theregister.com/2016/12/02/accused_iranian_disk_wiper_returns_to_destroy_saudi_orgs_agencies/ (accessed Jan. 20, 2018).

A. Ivanov and O. Mamedov. “The return of Mamba ransomware.”Aug. 09, 2017. [Online]. Available: https://securelist.com/the-return-of-mamba-ransomware/79403/ (accessed Sept. 13, 2017).

A. Johnson. “The Shamoon Attacks.” Aug. 16, 2012. [Online].Available: https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=281521ea-2d18-4bf9-9e88-8b1d-c41cfdb6&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments (accessed Sept. 14, 2017).

M. Mullen. “What Is Destructive Malware?” July 31, 2017.[Online]. Available: https://www.bluvector.io/what-is-destructive-malware/ (accessed Sept. 16, 2017).

A. Gupta. “Samas changes the way a Ransomware operates.”March 19, 2016. [Online]. Available: https://news.thewindowsclub.com/samas-ransomware-changes-way-ransomware-operates-82755/ (accessed Jan. 10, 2018).

A. Ivanov and O. Mamedov. “The return of Mamba ransomware.”Aug. 09, 2017. [Online]. Available: https://securelist.com/the-return-of-mamba-ransomware/79403/ (accessed Jan. 10, 2018).

A. Kharraz, W. Robertson, D. Balzarotti, L. Bilge and E. Kirda,“Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks,” in Detection of Intrusions and Malware, and Vulnerability Assessment, M. Almgren, V. Gulisano and F. Maggi, Ed, Cham, CH: Springer, 2015, pp. 3-24.

G. Paul and Shaunak. “Detailed threat analysis of Shamoon 2.0 Malware.” Feb. 05, 2017. [Online]. Available: http://www.vinransomware.com/blog/detailed-threat-analysis-of-shamoon-2-0-malware (accessed Sept. 14, 2017).

C. Mercer. “StoneDrill – Shamoon & Shamoon 2.0 Variant.” Mar.13, 2017. [Online]. Available: https://nsfocusglobal.com/stonedrill-shammon-shammon-2-0-variant/ (accessed Sept. 16, 2017).

S. Gates and C. Mercer. “Shamoon2: Back on the Prowl.” Feb. 8,2017. [Online]. Available: https://nsfocusglobal.com/shamoon-2-back-on-the-prowl/

Article details

Section
Original Research articles
Copyright Information
Creative Commons License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.

      You must read and accept the copyright terms and conditions(click here for copyright terms).