Jurisdiction: Saudi Arabia
Court filings and enforcement actions documenting cyber intrusions within or targeting entities in Saudi Arabia.
Key Facts
- 2 documented prosecution matters involving Saudi Arabia.
- Cumulative identified losses exceed $1.1 billion.
- Includes federal court filings, international extraditions, and sanctions designations.
Documented Incidents (2)
Saudi Aramco Shamoon Wiper Attack (Cutting Sword of Justice)
Devastating state-sponsored wiper attack attributed to Iranian threat actors ('Cutting Sword of Justice') that detonated the Shamoon (Disttrack) wiper across Saudi Aramco, simultaneously wiping 35,000 workstation hard drives and overwriting Master Boot Records with an image of a burning American flag.
TRITON / HatMan Petrochemical Safety Instrumented System Attack
Russian state research institute (Central Scientific Research Institute of Chemistry and Mechanics / TsNIIKhM) deployed the TRITON (HatMan) malware framework inside a Saudi Arabian petrochemical plant, directly manipulating Schneider Electric Triconex Safety Instrumented System (SIS) controllers to cause emergency plant shutdowns with the potential for physical explosion.