Our reports are the product of their visibility into the cybersecurity landscape and promptly identify what poses a threat. The Kingdom scored advanced points in all of these axes, she said.Īmin Hasbini, head of the global research and analysis team for the Middle East, Turkey, and Africa at Kaspersky, said: “Our cybersecurity experts have always been at the forefront of detecting and reporting the latest APT threats. This indexing evaluates countries periodically based on five main axes: Legal, technical, regulatory, capacity-building, and cooperation. “Saudi Arabia is ranked No.1 in the MENA region and Asia and No.2 globally according to the Global Cybersecurity Index issued by the UN’s specialized agency in information and communications technology, the International Telecommunication Union in 2021.” “Technically, the attack tricked victims to run a remote administration tool located in the downloads folder, similar to the RAT components used against Turkey and Kuwait back in 20, respectively.”ĭespite these threats, Alharbi said the Kingdom’s cybersecurity resources had proven their ability to face such dangers. The report shows that these cybercriminals rely on social engineering to compromise victims in Saudi Arabia. Referring to a report by Bitdefender, a cybersecurity technology company, Alharbi said: “Researchers shed light on a well-known APT cyber espionage campaign that targets mainly critical infrastructures in Saudi Arabia.This threat group is called Chafer APT (also known as APT39 or Remix Kitten). Assuming the attack is detected, an in-depth analysis and investigation on the file system is highly recommended as a quick response to recover the system and stop the attack.”
This means they would be able to control the operating system, applications, and data.
#Live cyber attack map full#
“This approach facilitates the mission of these cybercriminals to take full control of the file system and to compromise every single file there.
#Live cyber attack map zip#
To pass the firewall and the email protection techniques, she explained, these rigged files were protected by passwords and compressed as zip files. She said these cybercriminals were sending phishing emails that contained malicious Microsoft Office files impersonating legitimate entities. Some of the APT groups investigated were Oilrig, WIRTE, Lazarus, and Sofacy.įatemah Alharbi, a cybersecurity expert and assistant professor at Taibah University, told Arab News: “PowerShell-based malware are utilized by advanced cyberattacks targeting critical infrastructures in Saudi Arabia.” Other targeted sectors included finance, IT, healthcare, legal, military, and defense. Iraq, Qatar and Bahrain had fewer than 20 reports each.ĪPT attacks primarily targeted government agencies, followed by diplomatic institutions, the education sector, and telecommunication institutions. Kuwait and Oman had 21 each, while Jordan had 20. The second highest was Saudi Arabia with 39 reports, followed by Egypt with 30. The researchers issued 49 threat intelligence reports due to investigations associated with cyberattacks on the UAE, which endured the highest number of reports for all Middle Eastern countries. Kaspersky researchers, keeping a close eye on the region for APTs, worked on 68 investigative reports related to 29 cyber gangs actively targeting the Middle East since the start of the pandemic. The region has always been a hotbed for such attacks due to geopolitical factors. The targets, which are carefully chosen and researched, typically include large enterprises or government networks. RIYADH: Since the start of the pandemic, a wave of advanced threat campaigns targeting the Middle East have been discovered by Kaspersky, a global cybersecurity firm.Īn APT is an attack campaign in which intruders establish an illicit, long-term presence on a network to mine highly sensitive data.
0 kommentar(er)
