News / Middle East

Saudi Cyber Attack Seen as Work of Amateur Hackers Backed by Iran

Digital security experts say a major August cyber-attack at Saudi Arabia's top oil company appears to be the work of amateur hackers working on behalf of a nation state, and several signs point to Iran as their sponsor.

The experts say the methods apparently used by the hackers to damage many of Saudi Aramco's computers pose new challenges to other companies based in the region, and to Western powers engaged in cyber warfare with Iran.

Several hacker groups quickly claimed responsibility for the August 15 attack on Aramco, but their identities have remained a mystery and their online claims have not been verified.

Iran Accused as Cyber Attacker

The New York Times  reported Tuesday that unnamed U.S. intelligence officials believe the attack's real perpetrator was Iran. But it said the officials offered no specific evidence to support their claim.

Earlier this month, Iran's National Center of Cyberspace dismissed the U.S. allegation as politically motivated. Saudi Aramco has not commented on the perpetrators of the cyber-attack, citing an ongoing investigation.

Seculert, an Israel-based security company specializing in advanced threat detection, said the Aramco hackers may be affiliated with a government because the virus they deployed was designed to do more than just destroy hard drives.

Spying for a Government?

Seculert chief technology officer Aviv Raff said the affected computers sent data to a machine outside of the corporate network just before their hard drives were erased by the virus, dubbed "Shamoon" by researchers.

"With Shamoon, [the hackers] basically [were] trying to erase evidence of other intentions, trying to cover their tracks," said Raff.

He said those intentions may have included spying on Saudi Aramco for a government interested in the Saudi state-owned company's major energy infrastructure.

Jeffrey Carr, chief executive officer of U.S. security firm Taia Global, said Shamoon appears to have been reverse-engineered from a sophisticated data-stealing virus that attacked Iranian oil ministry computers in April.

Amateur Results

But Carr, whose firm specializes in protecting data from espionage, said Shamoon failed to accomplish its data-stealing objectives.

"The malware had some very basic coding errors in it," he said. "[It looks like] somebody in their basement doing some coding and reverse-engineering and then sending it out. It is unlikely that this was done by a professional team."

Carr said several factors indicate that the Aramco hackers were working for the Iranian government. He said Iran had a motive to hire them.

Circumstantial Evidence

Tehran urged Riyadh in July not to boost Saudi oil exports while Iranian production was being cut back because of Western sanctions.

"Iran wanted the West to feel the pressure [from a lower global oil supply and higher prices]," Carr said. "Of course, Aramco did [raise production]. So for me, [the virus] would be a standard shot across the bow by Iran, saying we warned you."

Iran appears to have hacker groups capable of staging major cyber-attacks without exposing the government as the responsible party.

A group calling itself the Iranian Cyber Army hijacked the home page of Baidu, China's largest search engine, in January 2010, leaving a message in Farsi saying the act was a protest against foreign meddling in Iran's domestic politics.

Iran also has a record of reverse-engineering to acquire technology. In April, an Iranian commander said Tehran was building a copy of a U.S. drone that it captured last year and took apart. Washington has acknowledged losing the RQ-170 Sentinel.

Iran Challenges its Cyber Enemies

Iran has said it is improving its cyber warfare capabilities to defend government computers against periodic attacks that it blames on Israel and the West.

Stephen Cobb, a security expert at ESET North America, said a country attacked by a virus is "highly likely" to examine the code and redeploy it.

"Malicious code is entirely different from conventional weapons in that you are actually giving the weapon to the person you are attacking," he said.

"It is extremely arrogant to think that the country you are attacking is not going to be able to figure out what the code does and reuse it, or write their own code and attack you back."

Carr of Taia Global said Iran is capable of capturing Western-made cyber tools worth millions of dollars and re-engineering them at a much lower cost.

A More Dangerous Insider Attack

Cobb said the Aramco incident also shows that companies face an escalated threat of cyber-attack from insiders. Experts have said the Shamoon virus was triggered by someone who had privileged access to the Saudi company's computers.

"Typically your insider threat in Western countries is to steal things or possibly exact revenge or hold the company hostage, whereas [the Aramco insider attack] was an act of destruction, and more expensive."

Cobb said the virus probably cost Aramco millions of dollars in lost worker productivity and unanticipated expenses, such as security experts being flown in to repair the damaged computers.

"You cannot assume that all the people working for a company agree with its aims and goals," Cobb said. "If someone with elevated system privileges turns against the company, there is pretty much no limit on what damage they can do."

Michael Lipin

Michael covers international news for VOA on the web, radio and TV, specializing in the Middle East and East Asia Pacific. Follow him on Twitter @Michael_Lipin

You May Like

Elusive Deal With Iran Could Yield Foreign Policy Legacy for Obama

A new Iranian leader -- and a strategic shift by the United States -- opens narrow window for nuclear agreement with Tehran More

Column: Saudi-Iran Meeting Could Boost Fight Against Islamic State

The fact that Iranians and Saudis are talking again does not guarantee a breakthrough, but it could make it easier to build a broad coalition against IS More

Thai Ruler Gives Top Cabinet Posts to Junta Inner Circle

Thailand's army chief has kept an iron grip on power as he extends the government, hand-picking an interim parliament that subsequently nominated him prime minister More

This forum has been closed.
Comment Sorting
Comments
     
by: FALSE FLAG
October 27, 2012 11:04 AM
This is truly one of the most ridiculous attempts at inciting violence upon another that I have ever seen. I wish this worked in real0life, where I could go to my friends house and toss a rock through the window and then go out and blame it on my enemy. I throw the rock and my friend kills my enemy... that's a win-win.


by: Richard Steven Hack from: San Francisco, CA
October 27, 2012 7:07 AM
Still ZERO evidence that Iran's government was behind any attacks. It's all speculation at this point - and most of the speculation appears politically motivated.


by: Lolcast
October 26, 2012 5:13 AM
Interesting... I was just reading on some other website that Panetta had said: "Only few countries in the world are capable of orchestrating such sophisticated attacks". So someone tell me... was it sophisticated or amateurish?!

In Response

by: BP from: Michigan
October 27, 2012 9:16 AM
I agree there are conflicting messages in the article. I hope it is not the work of amatuers since they just took down many of the computers of the biggest oil company.


by: Hundu from: Japan
October 25, 2012 9:36 PM
Iran... what a farce... used to be great... look what Islam has done to them... so sad...

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
West Africa Ebola Vaccine Trials Possible by Early 2015i
X
Carol Pearson
August 30, 2014 7:14 PM
A U.S. health agency is speeding up clinical trials of a possible vaccine against the deadly Ebola virus that so far has killed more than 1,500 people in West Africa. If successful, the next step would be a larger trial in countries where the outbreak is occurring. VOA's Carol Pearson has more.
Video

Video West Africa Ebola Vaccine Trials Possible by Early 2015

A U.S. health agency is speeding up clinical trials of a possible vaccine against the deadly Ebola virus that so far has killed more than 1,500 people in West Africa. If successful, the next step would be a larger trial in countries where the outbreak is occurring. VOA's Carol Pearson has more.
Video

Video Survivors Commemorate 70th Anniversary of Nazi Liquidation of Jewish Ghetto

When the German Nazi army occupied the Polish city of Lodz in 1939, it marked the beginning of a long nightmare for the Jewish community that once made up one third of the population. Roughly 200,000 people were forced into the Lodz Ghetto. Less than 7,000 survived. As VOA’s Kane Farabaugh reports, some survivors gathered in Chicago on the 70th anniversary of the liquidation of the Lodz Ghetto to remember those who suffered at the hands of the Nazi regime.
Video

Video Cost to Raise Child in US Continues to Rise

The cost of raising a child in the United States continues to rise. In its latest annual report, the U.S. Department of Agriculture says middle income families with a child born in 2013 can expect to spend more than $240,000 before that child turns 18. And sending that child to college more than doubles that amount. VOA’s Deborah Block visited with a couple with one child in Alexandria, Virginia, to learn if the report reflects their lifestyle.
Video

Video Chaotic Afghan Vote Recount Threatens Nation’s Future

Afghanistan’s troubled presidential election continues to be rocked by turmoil as an audit of the ballots drags on. The U.N. says the recount will not be completed before September 10. Observers say repeated disputes and delays are threatening the orderly transfer of power and could have dangerous consequences. VOA correspondent Meredith Buel reports.
Video

Video Ukraine Battles Pro-Russia Rebel Assault

After NATO concluded an emergency meeting to discuss the crisis in eastern Ukraine, the country is struggling to contain heavy fighting near the strategic port of Mariupol, on the Azov Sea. Separatist rebels are trying to capture the city, allegedly with Russian military help, and Ukraine's defense forces are digging in. VOA's Daniel Schearf spoke with analysts about what lies ahead for Ukraine.
Video

Video Growing Business Offers Paint with a Twist of Wine

Two New Orleans area women started a small business seven years ago with one thing in mind: to help their neighbors relieve the stress of coping with a hurricane's aftermath. Today their business, which pairs painting and a little bit of wine, has become one of the fastest growing franchises across the U.S. VOA’s June Soh met the entrepreneurs at their newest franchise location in the Washington suburbs.
Video

Video Ebola Vaccine Trials To Begin Next Week

The National Institutes of Health says it is launching early stage trials of a vaccine to prevent the Ebola virus, which has infected or killed thousands of people across West Africa. The World Health Organization says Ebola could infect more than 20,000 people across the region by the time the outbreak is over. The epidemic has health experts and governments scrambling to prevent more people from becoming infected. Zlatica Hoke has more.
Video

Video Asian Bacteria Threatens Florida Orange Trees

Florida's citrus fruit industry is facing a serious threat from a bacteria carried by the Asian insect called psyllid. The widespread infestation again highlights the danger of transferring non-native species to American soil. VOA’s George Putic reports.
Video

Video Aging Will Reduce Economic Growth Worldwide in Coming Decades

The world is getting older, fast. And as more people retire each year, fewer working-age people will be there to replace them. Bond rating agency Moody’s says that will lead to a decline in household savings; reducing global investments - which in turn, will lead to slower economic growth around the world. But experts say it’s not too late to mitigate the economic impact of the world’s aging populations. Mil Arcega has more.
Video

Video Is West Doing Enough to Tackle Islamic State?

U.S. President Barack Obama has ruled out sending ground troops to Iraq to fight militants of the so-called Islamic State, or ISIS, despite officials in Washington describing the extremist group as the biggest threat the United States has faced in years. Henry Ridgwell reports from London on the growing uncertainty over whether the West’s response to ISIS will be enough to defeat the terrorist threat.
Video

Video Coalition to Fight Islamic State Could Reward Assad

The United States along with European and Mideast allies are considering a broader assault against Islamic State fighters who have spread from Syria into Iraq and risk further destabilizing an already troubled region. But as VOA State Department Correspondent Scott Stearns reports, confronting those militants could end up helping the embattled Syrian President Bashar al-Assad.
Video

Video Made in America Socks Get Toehold in Online Fashion Market

Three young entrepreneurs are hoping to revolutionize the high-end sock industry by introducing all-American creations of their own. And they’re doing most of it the old-fashioned way. VOA’s Julie Taboh recently caught up with them to learn what goes into making their one-of-a-kind socks.
Video

Video Americans, Ex-Pats Send Relief Supplies to West Africa

Health organizations from around the world are sending supplies and specialists to the West African countries that are dealing with the worst Ebola outbreak in history. On a smaller scale, ordinary Americans and African expatriates living in the United States are doing the same. VOA's Carol Pearson reports.

AppleAndroid