Shamoon Malware: A brief understanding of the data-wiping malware’s attacks

[Łowca]

• Shamoon is a destructive malware designed to wipe infected systems by overwriting files with unwanted rubbish data.
  

• The data-wiping malware targets organizations in the United Arabic Emirates, Saudi Arabia, and Europe.
  

Shamoon malware, also known as disstrack, is a data-wiping malware which was discovered by researchers on 16 August 2012. The malware was used to attack oil and gas company Saudi Aramco in the Middle East in 2012.

After four years, the destructive malware returned in 2016 targeting the same industry. In both the attacks, the malware wiped files and replaced them with propaganda images such as burning US flag and body of Alan Kurdi.

The latest version of Shamoon malware was spotted in December 2018, attacking Italian oil services firm Saipem.

Full Article