LIVE
UTC --:--:--
OT SECURITY HUB
by zuckergates
// INCIDENT · 2016

Shamoon 2

Kebangkitan Shamoon menargetkan entitas publik dan swasta Saudi.

criticalSaudi ArabiaGovernmentAPT33
Impact
Ribuan workstation di-wipe kementerian Saudi.
Initial vector
Shamoon wiper revival
Malware / tooling
Shamoon 2
Lessons learned
  • Offline immutable backup
  • Domain controller hardening
  • IR retainer 24/7