First Published: 2012-10-13


Suspicion swirls around Iran in Saudi Aramcos cyberattack


US believes Iran is behind major cyberattack on Saudi Arabia's state oil company, Qatari gas firm.


Middle East Online


More than suspicion

The United States believes Iran was behind a major cyberattack on Saudi Arabia's state oil company and a Qatari gas firm, a former US official who has worked on cybersecurity issues said Friday.

In a major cybersecurity speech on Thursday, Defense Secretary Leon Panetta issued a veiled warning to Tehran that Washington is ready to take preemptive action to protect US computer networks, the former official said.

US government agencies have concluded that Iran orchestrated the "shamoon" virus that disabled tens of thousands of computers at Saudi Aramco and struck Qatari natural gas firm RasGas as well, said James Lewis, who has worked for the State Department and other government agencies on national security and cyber issues.

American officials had "more than a suspicion" that Iran was to blame for the August attacks, that also possibly included recent denial of service attacks on some US banks, said Lewis, a senior fellow at the Center for Strategic and International Studies think tank.

"There's generally a conviction that it was Iran," he said.

Lewis said he was not privy to the intelligence reports that backed up the assertion, but said it was implausible the Iranian government would not be aware of a major cyber operation coming from sources inside the country.

"How could you do something that consumed a massive amount of bandwidth in Iran and not have the government notice, when it's monitoring the Internet for political purposes?" he asked.

US government officials had concluded that Iran likely launched the attack in retaliation for US-led sanctions over its nuclear program and a cyber sabotage campaign reportedly backed by Washington, he said.

A senior administration official, who spoke on condition of anonymity, told AFP the cyberattack on the Gulf oil giants was believed to be carried out by a "state actor" and acknowledged that Iran would be a prime suspect.

In his speech, Panetta referred to the "shamoon" virus for the first time publicly, saying it erased critical files on about 30,000 computers at Saudi Aramco, the world's largest oil company.

He said the virus, which hit Qatar's Rasgas a few days later, was "probably the most destructive attack that the private sector has seen to date."

The Pentagon chief also spoke of "foreign actors" probing sensitive US networks and cited denial of service attacks on some large US financial companies in recent weeks.

While he reiterated US concerns about cyber threats linked to Russia and China, Panetta said Iran was building up its digital capabilities.

In the same speech to business executives in New York, Panetta said the United States had improved its ability to track the origin of digital attacks and suggested the military stood ready to take preemptive action in cyberspace to protect vital networks.

"He came as close to fingering Iran for some of the disruptions we've seen in the last month as you could do without actually saying it by name," said Lewis, who has advised the US government on cyber security.

"Hopefully, the Iranians picked it up as a warning."

Iran has advanced its digital warfare capacity faster than US officials had anticipated, Lewis said, though the attack on Saudi Aramco was relatively unsophisticated.

"We're used to China, we're used to Russia. But Iran is new, Iran is different. And a lot of people didn't think it would develop this quickly," he said.

US officials said information about the recent cyberattacks was declassified to allow Panetta to refer to the incidents in his speech.

The "shamoon" virus wiped out crucial files and replaced them with images of burning American flags.

Two weeks after the August 15th cyberattack on Saudi Aramco, the company announced it had restored its main internal network and that the assault had not disrupted oil production.

The firm targeted in Qatar, RasGas, is a joint venture between American oil firm Exxon Mobil Corp and state-controlled Qatar Petroleum.


Rebels evacuate Syria's Eastern Ghouta

Sarkozy says life ‘living hell’ since corruption allegations

Turkey’s largest media group to be sold to Erdogan ally

Hezbollah leader says debt threatens Lebanon disaster

Exiled Syrian doctors treat refugees in Turkey

In world first, flight to Israel crosses Saudi airspace

Saudi, US must pursue 'urgent efforts' for Yemen peace: Mattis

US, Jordan launch new counterterrorism training centre

Two Hamas security force members killed in raid on bomb suspect

Turkey gives watchdog power to block internet broadcasts

EU leaders to condemn Turkey’s ‘illegal’ actions in Mediterranean

Ahed Tamimi reaches plea deal for eight months in jail

UN launching final push to salvage Libya political agreement

Conditions for displaced from Syria's Ghouta 'tragic': UN

Sisi urges Egyptians to vote, denies excluding rivals

Rights Watch says Libya not ready for elections

Saudis revamp school curriculum to combat Muslim Brotherhood

American mother trapped in Syria’s Ghouta calls out Trump

Syria workers say French firm abandoned them to jihadists

Grim Nowruz for Kurds fleeing Afrin

Sarkozy back in custody for second day of questioning

'Saudization' taking its toll on salesmen

Syrian rebels reach evacuation deal in Eastern Ghouta town

Israel confirms it hit suspected Syrian nuclear reactor in 2007

UN says Turkey security measures 'curtail human rights'

Netanyahu says African migrants threaten Jewish majority

US Senate votes on involvement in Yemen war as Saudi prince visits

What a ‘limited strike’ against Syria’s Assad might mean

Erdogan tells US to stop ‘deceiving’, start helping on Syria

IS controls Damascus district in surprise attack

French ex-president held over Libya financing allegations

NGO says Israeli army violating Palestinian minors’ rights

Human rights chief slams Security Council for inaction on Syria

US warns Turkey over civilians caught in Syria assault

Saudi crown prince keen to cement ties with US

Abbas calls US ambassador to Israel 'son of a dog'

Erdogan vows to expand Syria op to other Kurdish-held areas

Kurdish envoy accuses foreign powers of ignoring Turkish war crimes

Morocco authorities vow to close Jerada's abandoned mines

Israeli soldier sees manslaughter sentence slashed

Turkey insists no plans to remain in Afrin

Cairo voters show unwavering support for native son Sisi

Forum in Jordan explores new teaching techniques

Gaza Strip woes receive renewed attention but no fix is expected

Kurds, Syrian opposition condemn Afrin looting