Saudi Aramco cyber-attack (2012) INVOLVES Shamoon
The attack involved the Shamoon wiper virus.
Explicit Confidence 99% · Jack Rhysider EP 30 Details
“This wiper virus would be known as the Shamoon virus.”
Malware
malware:shamoon
Also: Shamoon virus, wiper virus
Destructive wiper malware that erased Windows systems at Saudi Aramco and displayed burning American flags.
Destructive wiper malware that erased Windows systems at Saudi Aramco and displayed burning American flags.
“This wiper virus would be known as the Shamoon virus.”
“This virus specifically targeted machines running Windows.”
Malware mentioned as having wiped computers at Saudi Aramco in an earlier Darknet Diaries episode.
“a hack that was done against Saudi Aramco called Shamoon”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | TARGETS | Saudi Aramco | Explicit | 30 |
| outgoing | USES | logic bomb | Explicit | 30 |
| outgoing | AFFECTS | master boot record | Explicit | 30 |
| outgoing | RELATED_TO | Stuxnet | Uncertain | 30 |
| incoming | INVOLVES | Saudi Aramco cyber-attack (2012) | Explicit | 30 |
Saudi Aramco cyber-attack (2012) INVOLVES Shamoon
The attack involved the Shamoon wiper virus.
Explicit Confidence 99% · Jack Rhysider EP 30 Details
“This wiper virus would be known as the Shamoon virus.”
Shamoon TARGETS Saudi Aramco
Shamoon targeted Saudi Aramco's computer systems, wiping approximately 35,000 of them.
Explicit Confidence 98% · Jack Rhysider EP 30 Details
“35,000 computers had become completely unusable all at the same time.”
Shamoon USES logic bomb
Shamoon was described as a logic bomb set to trigger at a particular time and day.
Explicit Confidence 99% · Chris Kubecka EP 30 Details
“It was a logic bomb set to go off at a particular time on a particular day.”
Shamoon AFFECTS master boot record
Shamoon destroyed the master boot record, preventing affected computers from restarting normally.
Explicit Confidence 98% · Chris Kubecka EP 30 Details
“you lost your master boot record so you couldn’t immediately pull everything back up”
Security researchers linked Shamoon's Saudi Aramco attack as possible retaliation for Stuxnet; this relationship is presented as uncertain.
Uncertain Confidence 75% · Jack Rhysider EP 30 Details
“this was a retaliation from Iran because of the Stuxnet attack that hit their nuclear facilities”