Revived Shamoon Virus Causing Disruptions in Saudi Oil Sector

Symantec reported a campaign in the Middle East using the Shamoon destructive wiper alongside an Ismdoor trojan attributed to a state-linked actor called “Greenbug.” Multiple public and private organizations across energy, aviation, government and other sectors were impacted via phishing emails; the operation reportedly combined data theft and disk-wiping destructive activity and is suspected to be linked to Iran.