Cybersecurity incident — 2018-12-10 00:00:00
Affected organization: SAIPEM
Affected country: Italy
Industry: Mining, Quarrying, and Oil and Gas Extraction
Event type: Disruptive
Event subtype: Data Attack
Motive: Sabotage
Actor: Iranian Nasr Institute (APT33)
Actor type: Nation-State
Actor country: Iran (Islamic Republic of)

Italian oil services company SAIPEM is hit by a new version of the Shamoon malware. The attack started in India and hit the servers in Saudi Arabia, the United Arab Emirates and Kuwait. Fingers are pointed to Iran.