Saudi Aramco reports increase in cyber attack attempts, foresees the trend will continue

Saudi Aramco has seen an increase in attempted cyberattacks since the final quarter of 2019, which the company has so far successfully countered, the state oil giant’s chief information security officer told Reuters on Thursday. “Overall there is definitely an increase in the attempts of (cyber) attacks, and we are very successful in preventing these attacks at the earliest stage possible,” Khalid al-Harbi told Reuters in a telephone interview. “The pattern of the (cyber) attacks is cyclical, and we are seeing that the magnitude is increasing, I would suspect that this will continue to be a trend,” he said, without giving further details on who was behind the attacks. [caption id=“attachment_8014931” align=“alignnone” width=“1280”] Visitors stop at an Aramco exhibit in Riyadh 13 November 2019. Image: Getty[/caption] Saudi Arabia has been the target of frequent cyberattacks, including the “Shamoon” virus, which cripples computers by wiping their disks and has hit both government ministries and petrochemical firms, the latest of these was in 2017. Aramco, which pumps 10% of global oil supply, experienced its largest cyberattack to date in August 2012, when a Shamoon virus attack damaged around 30,000 computers and was aimed at stopping oil and gas production at the biggest OPEC exporter. Aramco’s facilities were also attacked in September by drone and missile strikes that temporarily shut down 5.7 million barrels per day of output - more than 5% of global oil supply. The U.S. blamed Iran for the attack, something Iran has denied. Harbi also said that there had been attempts to infiltrate Aramco via Emotet, a malware that has been active globally, but it was successfully prevented. The malware has impacted other small organisations in Saudi Arabia, he said, without elaborating. Harbi said that identifying the source of the cyber attacks was the most difficult aspect of cybersecurity. In 2017, Saudi Arabian security officials said that the country had been targeted as part of a wide-ranging cyber espionage campaign observed against five Middle East nations as well as several countries outside the region.