criticalSaudi ArabiaGovernmentAPT33
Impact
Ribuan workstation di-wipe kementerian Saudi.
Initial vector
Shamoon wiper revival
Malware / tooling
Shamoon 2
Lessons learned
- Offline immutable backup
- Domain controller hardening
- IR retainer 24/7
Kebangkitan Shamoon menargetkan entitas publik dan swasta Saudi.