Claim

Saudi Aramco cyber-attack (2012) INITIAL_ACCESS_VIA exploit of unpatched Microsoft Word or Adobe Acrobat vulnerabilities

The suspected phishing attachment could exploit known vulnerabilities in unpatched Microsoft Word or Adobe Acrobat installations.

Episode
EP 30 — Shamoon
Origin
Derived
Confidence
90% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
—

Transcript evidence

“the file would attempt to exploit one of these known vulnerabilities to gain access to the computer”

Jack Rhysider · offsets 5205–5304

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:29:42.732075+00:00

claim:ep030:d7b08fbb32cf