Slashdot Mirror
Data-Wiping Malware Destroys Data At Italian and UAE Oil and Gas Companies (zdnet.com)
An anonymous reader writes: A new variant of the Shamoon malware was discovered on the network of an Italian and UAE oil and gas company. While the damage at the UAE firm is currently unknown, the malware has been confirmed to have destroyed files on about ten percent of the Italian company's PC fleet. Shamoon is one of the most dangerous strains of malware known to date. It was first deployed in two separate incidents that targeted the infrastructure of Saudi Aramco, Saudi Arabia's largest oil producer, in 2012 and 2016. During those incidents, the malware wiped files and replaced them with propaganda images (burning U.S. flag and body of Alan Kurdi). The 2012 attack was devastating in particular, with Shamoon wiping data on over 30,000 computers, crippling the company's activity for weeks. Historically, the malware has been tied to the Iranian regime, but it's unclear if Iranian hackers were behind these latest attacks. This new Shamoon version was revealed to the world when an Italian engineer uploaded the malware on VirusTotal, triggering detections at all major cyber-security firms across the globe.
https://it.slashdot.org/story/...
That's ok, you can just restore the data from the back ups. You make regular back ups, right?
Seven puppies were harmed during the making of this post.
> over-educated libtards
Anyone who graduateds from the high school is a liberal.
Shamoon is one of the most dangerous strains of malware known to date.
Well, then if I see it come up on Tinder, I'm swiping left.
- First they ignore you, then they laugh at you, then ???, then profit.
That's-a what you get when have one too many braciole, you finocchio. Next time, you oughta read-a the sanity clause.
You are welcome on my lawn.
Since they used the staged Alan Kurdi photo-op it is likely western intelligence services that performed this act
global warming. They won't let us have a cooler Earth. People die every summer because they make it too hot for human life. In 2010, over 50,000 people died in Russia (downwind from Trump) because of their global warming.
"The 2012 attack was devastating in particular, with Shamoon wiping data on over 30,000 computers, crippling the company's activity for weeks."
Sounds like business as usual... it's not worth the time to spend the money to protect against these problems... better off losing a whole lot fucking more money when it happens and then curse the department they directly prevented from protecting this problem.
This is worse than just shooting oneself in the foot, its more like making sure the trigger gets pulled no matter what.
This problem is everywhere too, this one just happens to make it into the news. I don't think businesses are really aware of how much money it hemorrhages in vain attempts to save money.
The lost productivity, the T&E required to restore that lost productivity, without exception, has always cost more than was ever saved.
I have seen companies experience multi million dollars losses because they did not see the value in a product that cost a couple of hundred K. This is especially true for redundant power. Backup power generation is stupid cheap compared to the losses you face from a 24 hour power outage. All those employees getting paid for doing no work is just the start of it.
Most businesses fundamentally do not understand security, and most programmers fundamentally work against good security, and so does most of the industry. Security has always been an after the fact effort.
Per (& this is a WEIRD one): "The communications module is responsible for reaching out to hardcoded URLs to communicate with the C2 server, but like previous Disttrack samples, this communication module does not contain functional C2 domains to use in the URLs." - FROM https://unit42.paloaltonetwork...
* Assuming it's NOT using any OLDER ones from their previous articles on older versions of "Shamoon" - & I don't recall them so look for yourself IF you wish, they post links to old research I didn't check yet (complex article, as is).
(I'd have to say @ this point @ least, Mb & not send back anything to some 'controlling entity' imo - unlike most other botnets/malwares etc., this one's a "wee bit different" in THAT aspect hence my statement now... & IT HAS TO COME FROM SOMEWHERE, so if NOT ONLINE, perhaps USB sticks & LOCAL people in said organizations that were attacked...)
APK
P.S.=> That quote - THAT'S ODD - no domain/hostnames for C&C or unless I missed it, no IP addresses even (correct me IF I am off/wrong & missed these - no coffee yet today)... apk
to make it less hot. It's too damn hot now because of these corporations. I wonder how much cooler it got the first time they got hit.
Two companies involved with the pollution and destruction of our planet. If Stuxnet can target Iranian centrifuges perhaps we're seeing the start of a new type of anti-oil activism?
The fact that is tied to Iran means it probably has nothing to with Iran...
use linux you dumb worthless fucks or eat shit, fully deserved
This crazy conspiracy theory is so old, why do you continue with it when there have been so many other crazy conspiracy theories since then to choose from? Most of them will still allow you to express your insecurity against minorities, but you can also choose from liberals or conservative targets. The last 10 years in particular have been great for crazy theory conspiracies, you're really missing out by not upgrading to something new. This one is tired and old, not at the least amusing any more.