Malware
Shamoon
- First Reported
- Dec 19, 2024
- Latest Reported
- Jun 11, 2026
Reported Context (5)
- those of Russia and China, Iranian cyber units have demonstrated consistent offensive capacity from the Shamoon virus that crippled Saudi Aramco in 2012 to sustained campaigns against US financial institutions and the EclecticIQ Report Warns of Escalating Cyber Risks Amid Regional Conflicts
- Shamoon wiper destroys 30,000 Saudi Aramco endpoints. AI-Assisted Reconnaissance Lowers Barriers to Targeting Exposed US Industrial Systems
- "description": "The post discusses Shamoon malware, a wiper that targets devices on a shared network to erase operating systems. It details four waves of attacks since its emergence on August 15, 2012, primarily against Hunt.io 2.1 Adds Threat-Hunting, IOC Enrichment and Infrastructure Analysis Updates
- "publication_title": "Shamoon Malware. Shamoon Malware is a wiper that spread...", Hunt.io Adds IOC Feed and Threat-Actor Attribution to C2 Data
- drivers with insufficient access controls, have been used in some advanced attacks. For example, in the Shamoon campaign, a RawDisk driver from Eldos was used to overwrite hard drives, while in February 2022, How Threat Actors Exploit Vulnerable Windows Drivers in BYOVD Attacks
CVE (2)
Malware (19)
People (11)
Threat Actors (41)
MITRE ATT&CK (12)
Vendors (28)
Products (27)
Tools (7)
Industries (18)
Countries (23)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.