Middle East faced wave of cybersecurity threats since start of pandemic

1 / 2
The region has always been a hotbed for such attacks due to geopolitical factors. (File/Shutterstock)
2 / 2
Fatemah Alharbi, Cybersecurity researcher and consultant. (Supplied)
Short Url
Updated 24 October 2021
Follow

Middle East faced wave of cybersecurity threats since start of pandemic

  • The researchers issued 49 threat intelligence reports due to investigations associated with cyberattacks on the UAE
  • In the VMWare report, a survey of 252 Saudis showed 84 percent of them said that cyberattacks had increased due to working from home

RIYADH: Since the start of the pandemic, a wave of advanced threat campaigns targeting the Middle East have been discovered by Kaspersky, a global cybersecurity firm.

An APT is an attack campaign in which intruders establish an illicit, long-term presence on a network to mine highly sensitive data. The targets, which are carefully chosen and researched, typically include large enterprises or government networks.

The region has always been a hotbed for such attacks due to geopolitical factors.

Kaspersky researchers, keeping a close eye on the region for APTs, worked on 68 investigative reports related to 29 cyber gangs actively targeting the Middle East since the start of the pandemic.

The researchers issued 49 threat intelligence reports due to investigations associated with cyberattacks on the UAE, which endured the highest number of reports for all Middle Eastern countries.

The second highest was Saudi Arabia with 39 reports, followed by Egypt with 30. Kuwait and Oman had 21 each, while Jordan had 20. Iraq, Qatar and Bahrain had fewer than 20 reports each.

APT attacks primarily targeted government agencies, followed by diplomatic institutions, the education sector, and telecommunication institutions. Other targeted sectors included finance, IT, healthcare, legal, military, and defense.

Some of the APT groups investigated were Oilrig, WIRTE, Lazarus, and Sofacy.

Fatemah Alharbi, a cybersecurity expert and assistant professor at Taibah University, told Arab News: “PowerShell-based malware are utilized by advanced cyberattacks targeting critical infrastructures in Saudi Arabia.”

She said these cybercriminals were sending phishing emails that contained malicious Microsoft Office files impersonating legitimate entities.

To pass the firewall and the email protection techniques, she explained, these rigged files were protected by passwords and compressed as zip files.

“This approach facilitates the mission of these cybercriminals to take full control of the file system and to compromise every single file there. This means they would be able to control the operating system, applications, and data. Assuming the attack is detected, an in-depth analysis and investigation on the file system is highly recommended as a quick response to recover the system and stop the attack.”

Referring to a report by Bitdefender, a cybersecurity technology company, Alharbi said: “Researchers shed light on a well-known APT cyber espionage campaign that targets mainly critical infrastructures in Saudi Arabia.This threat group is called Chafer APT (also known as APT39 or Remix Kitten). The report shows that these cybercriminals rely on social engineering to compromise victims in Saudi Arabia.

“Technically, the attack tricked victims to run a remote administration tool located in the downloads folder, similar to the RAT components used against Turkey and Kuwait back in 2014 and 2018, respectively.”

Despite these threats, Alharbi said the Kingdom’s cybersecurity resources had proven their ability to face such dangers.

“Saudi Arabia is ranked No.1 in the MENA region and Asia and No.2 globally according to the Global Cybersecurity Index issued by the UN’s specialized agency in information and communications technology, the International Telecommunication Union in 2021.”

This indexing evaluates countries periodically based on five main axes: Legal, technical, regulatory, capacity-building, and cooperation. The Kingdom scored advanced points in all of these axes, she said.

Amin Hasbini, head of the global research and analysis team for the Middle East, Turkey, and Africa at Kaspersky, said: “Our cybersecurity experts have always been at the forefront of detecting and reporting the latest APT threats. Our reports are the product of their visibility into the cybersecurity landscape and promptly identify what poses a threat.

“We use these insights to, of course, alert the concerned organizations on time and provide them with the protection as well as intelligence needed against both known and unknown threats. As companies move towards digitization, especially due to the pandemic, it is more important now than ever before to know about the threats that are constantly evolving.”

According to a recent report from Kaspersky and VMWare, working remotely during the pandemic made Saudi employees vulnerable to cyberattacks.

In the VMWare report, a survey of 252 Saudis showed 84 percent of them said that cyberattacks had increased due to working from home.

Alharbi talked about methods to protect users from social engineering threats. “Recently, we see a rise in the number of cyberattacks that are based on social engineering. According to a recent report by PurpleSec, 98 percent of cyberattacks rely on social engineering. Cyber criminals prefer to use social engineering techniques that can expose a victim’s natural inclination to trust easily compared to implementing malwares or any other tools to hack systems.

“For that, organizations must strengthen and diversify their cybersecurity awareness tactics, such as publishing cybersecurity awareness content, in-class training, videos, simulations and tests,” she said.


Lebanon’s Hezbollah says fighter killed in south Lebanon

Updated 56 min 22 sec ago
Follow

Lebanon’s Hezbollah says fighter killed in south Lebanon

BEIRUT: Lebanon’s heavily armed Hezbollah said in a statement that one of its fighters was killed in south Lebanon on Saturday, the day after the collapse of a truce between Israel and the Palestinian militant group Hamas led hostilities to flare at the frontier.


Israel intensifies its assault on southern Gaza, causing renewed concern about civilian deaths

Updated 02 December 2023
Follow

Israel intensifies its assault on southern Gaza, causing renewed concern about civilian deaths

KHAN YOUNIS, Gaza Strip: Israel pounded targets in the southern Gaza Strip on Saturday, intensifying a renewed offensive that followed a weeklong truce with Hamas and giving rise to renewed concerns about civilian casualties.
At least 200 Palestinians have been killed since the fighting resumed Friday morning, according to the Health Ministry in Hamas-run Gaza, even as the United States urged ally Israel to do everything possible to protect civilians.
“This is going to be very important going forward,” Secretary of State Antony Blinken said Friday after meetings with Arab foreign ministers in Dubai, wrapping up his third Middle East tour since the war started. “It’s something we’re going to be looking at very closely.”
Many of Israel’s attacks Saturday were focused on the Khan Younis area in southern Gaza, where the military said it had struck more than 50 Hamas targets with airstrikes, tank fire and its navy.
The military dropped leaflets the day before warning residents to leave but, as of late Friday, there had been no reports of large numbers of people leaving, according to the United Nations.
“There is no place to go,” lamented Emad Hajjar, who fled with his wife and three children from the northern town of Beit Lahia a month ago to seek refuge in Khan Younis.
“They expelled us from the north, and now they are pushing us to leave the south.”
Israel’s military said it also carried out strikes in the north, and hit more than 400 targets in all across the Gaza Strip.
Some 2 million people — almost Gaza’s entire population — are crammed into the territory’s south, where Israel urged people to relocate at the war’s start and has since vowed to extend its ground assault. Unable to go into north Gaza or neighboring Egypt, their only escape is to move around within the 220-square-kilometer (85-square-mile) area.
In response to US calls to protect civilians, the Israeli military released an online map, but it has done more to confuse than to help.
It divides the Gaza Strip into hundreds of numbered, haphazardly drawn parcels, sometimes across roads or blocks, and asks residents to learn the number of their location in case of an eventual evacuation.
“The publication does not specify where people should evacuate to,” the UN office for coordinating humanitarian issues in the Palestinian territory noted in its daily report. “It is unclear how those residing in Gaza would access the map without electricity and amid recurrent telecommunications cuts.”
Egypt has expressed concerns the renewed offensive could cause Palestinians to try and cross into its territory. In a statement late Friday, the Egyptian Foreign Ministry said the forced transfer of Palestinians “is a red line.”
US Vice President Kamala Harris, who was in Dubai on Saturday for the COP28 climate conference, was expected to outline proposals with regional leaders to “put Palestinian voices at the center” of planning the next steps for the Gaza Strip after the conflict, according to the White House. US President Joe Biden’s administration has been emphasizing the need for an eventual two-state solution, with Israel and a Palestinian state coexisting.
The renewed hostilities have also heightened concerns for 136 hostages who, according to the Israeli military, are still held captive by Hamas and other militants after 105 were freed during the truce. For families of remaining hostages, the truce’s collapse was a blow to hopes their loved ones could be the next out after days of seeing others freed. The Israeli army said Friday it had confirmed the deaths of four more hostages, bringing the total known dead to seven.
During the truce, Israel freed 240 Palestinians from its prisons. Most of those released from both sides were women and children.
The war began after the Oct. 7 attack by Hamas and other militants, who killed about 1,200 people, mostly civilians, in southern Israel and took around 240 people captive.
After the end of the truce, militants in Gaza resumed firing rockets into Israel, and fighting broke out between Israel and Hezbollah militants operating along its northern border with Lebanon.
HUMANITARIAN AID HALT
Hundreds of thousands of people fled northern Gaza to Khan Younis and other parts of the south earlier in the war, part of an extraordinary mass exodus that has left three-quarters of the population displaced and facing widespread shortages of food, water and other supplies.
Since the resumption of hostilities, no aid convoys or fuel deliveries have entered Gaza, and humanitarian operations within Gaza have largely halted, according to the UN
The International Rescue Committee, an aid group operating in Gaza, warned the return of fighting will “wipe out even the minimal relief” provided by the truce and “prove catastrophic for Palestinian civilians.”
Up until the truce began, more than 13,300 Palestinians were killed in Israel’s assault, roughly two-thirds of them women and minors, according to the Health Ministry in Hamas-controlled Gaza, which does not differentiate between civilians and combatants.
The toll is likely much higher, as officials have only sporadically updated the count since Nov. 11. The ministry says thousands more people are feared dead under the rubble.
Israel says it is targeting Hamas operatives and blames civilian casualties on the militants, accusing them of operating in residential neighborhoods. Israel says 77 of its soldiers have been killed in the ground offensive in northern Gaza. It claims to have killed thousands of militants, without providing evidence.


UN agency says inaction on Gaza amounts to ‘approval’ of killing children

Updated 02 December 2023
Follow

UN agency says inaction on Gaza amounts to ‘approval’ of killing children

  • Israeli warplanes have resumed bombing Gaza after a week-old truce with Hamas ended
  • UNICEF spokesperson says resumption of war means ‘hell on Earth has returned to Gaza’

GENEVA: UNICEF has appealed for a lasting ceasefire to be implemented in Gaza, describing inaction as “an approval of the killing of children” after a week-old truce between Israel and Hamas collapsed.
“A lasting ceasefire must be implemented,” James Elder, spokesperson for UNICEF, told reporters via video link from Gaza.
“Inaction at its core is an approval of the killing of children.”
The UN described the hostilities as “catastrophic” and urged parties to bring about a lasting ceasefire.
Jens Laerke, spokesperson for the UN humanitarian office in Geneva, said the resumption of hostilities meant “hell on Earth has returned to Gaza.”
Israeli warplanes resumed bombing Gaza, sending Palestinian civilians fleeing for shelter, after a week-old truce ran out with no deal to extend it.
“The resumption of hostilities in Gaza is catastrophic,” said Volker Turk, the UN High Commissioner for Human Rights.
“I urge all parties and states with influence over them to redouble efforts, immediately, to ensure a ceasefire – on humanitarian and human rights grounds.”
In a post on X social media platform, UN Secretary-General Antonio Guterres said he regretted the resumption of hostilities and hoped a new pause could be established.
“The return to hostilities only shows how important it is to have a true humanitarian ceasefire,” he said.
Laerke said that the week-long truce had seen significantly larger humanitarian convoys entering densely populated Gaza, even reaching north of Wadi Gaza, which prior to the pause had received almost no supplies.
“With the resumption of war, we fear that the continuation of this (aid) is now in doubt,” he said.
“The Rafah crossing is closed as of now. We need a resumption of a humanitarian pause, not a return to war.”


Libya frees four Hamas members held since 2016: media

Security men guard the entrance to the Interior Ministry in the Libyan capital, Tripoli, on August 30, 2012. (AFP)
Updated 02 December 2023
Follow

Libya frees four Hamas members held since 2016: media

  • Their release on Friday was reported by several Libyan media, which said that the men were freed at the request of the Libyan prosecutor’s office following Turkish mediation

TRIPOLI: Libyan authorities on Friday released four members of the Palestinian militant group Hamas who were arrested in 2016 on charges including trafficking arms to Gaza, according to Libyan media.
The four men — Marwan Al-Ashqar, his son Baraa, Mouayad Abed and Nasib Choubeir — were detained in Tripoli in October 2016.
Their arrest was made public by the Libyan prosecutor’s office a few months later.
In February 2019, they were sentenced by a Tripoli court to terms ranging from 17 to 22 years in prison, according to Libyan media, on charges of arms trafficking and spying.
Their release on Friday was reported by several Libyan media, which said that the men were freed at the request of the Libyan prosecutor’s office following Turkish mediation.
There was no immediate official confirmation of their release, including from the government of Tripoli-based Prime Minister Abdelhamid Dbeibah.
Reports said the four men, who were incarcerated in the Mitiga detention center in Tripoli, left for Turkiye then Qatar, which hosts Hamas’s political leadership.
An unverified image, shared on social media, showed three men in what appeared to be a private jet.
Their reported release comes against the backdrop of a nearly eight-week-old war between Israel and Hamas in the Gaza Strip.
The fighting was triggered by an unprecedented attack by Hamas on Israel on October 7 during which about 1,200 people were killed, mostly civilians, and around 240 taken hostage, according to Israeli authorities.
The Hamas government in Gaza says Israeli retaliatory strikes have killed more than 15,000 people, also mostly civilians.
Thrown into chaos since the fall of dictator Muammar Qaddafi in 2011, Libya is split between Dbeibah’s United Nations-supported government in the west and a rival administration in the east backed by military strongman Khalifa Haftar.
 

 


Israel’s most wanted: the three Hamas leaders in Gaza it aims to kill

Updated 02 December 2023
Follow

Israel’s most wanted: the three Hamas leaders in Gaza it aims to kill

  • Two military experts said that killing Sinwar, Deif and Issa would allow Israel to claim an important symbolic victory. But achieving even that goal would be long and costly, with no guarantee of success

GAZA: Israeli Defense Minister Yoav Gallant has a poster hanging on a wall of his office in Tel Aviv, in the wake of the Oct. 7 attack on Israel by Hamas. It shows mugshots of hundreds of the Palestinian militant group’s commanders arranged in a pyramid.
At the bottom are Hamas’ junior field commanders. At the top is its high command, including Mohammed Deif, the shadowy mastermind of last month’s assault.
The poster has been re-printed many times after Israel invaded Gaza in retaliation for Oct. 7: the faces of dead commanders marked with a cross.
But the three men topping Israel’s hit-list remain at large: Deif, the head of Hamas’ military wing, the Izz el-Deen Al-Qassam Brigades; his second in command, Marwan Issa; and Hamas’ leader in Gaza, Yahya Sinwar.
Hostilities resumed in Gaza on Friday after a seven-day truce brokered by Qatar collapsed. Reuters spoke to four sources in the region, familiar with Israeli thinking, who said that Israel’s offensive in Gaza was unlikely to stop until those three top Hamas commanders are dead or captured.
The seven-week-old military campaign has killed more than 15,000 people, according to Gaza health officials, stirring international outcry.
The 61-year-old Sinwar, as well as Deif and Issa, both 58, form a secretive three-man military council atop Hamas that planned and executed the Oct. 7 attack. Some 1,200 people were killed and around 240 taken hostage in that assault, the bloodiest in Israel’s 75-year history.
The three leaders are directing Hamas’ military operations and led negotiations for a prisoner-hostage swaps, possibly from bunkers beneath Gaza, three Hamas sources say.
Killing or capturing the three men will likely be a long and arduous task but might signal that Israel was close to shifting from all-out war to less intense counter insurgency operations, according to three of the senior regional sources. That does not mean that Israel’s fight against Hamas would stop.
Officials, including Prime Minister Benjamin Netanyahu, have said Israel’s objectives are the destruction of Hamas’ military and governmental capabilities, bringing the hostages back, and ensuring that the area around Gaza will never be threatened by a repeat of the Oct. 7 attack. To achieve those goals, eliminating the leadership of Hamas will be essential.
“They are living on borrowed time,” Gallant told a news conference last week, indicating that Israeli intelligence agency Mossad would hunt down the militant group’s leadership anywhere in the world. The Israeli government did not respond to a request for comment.
Two military experts said that killing Sinwar, Deif and Issa would allow Israel to claim an important symbolic victory. But achieving even that goal would be long and costly, with no guarantee of success.
Backed by drones and aircraft, Israeli troops have swept through less populated northern and western parts of Gaza but the hardest, and most destructive, phase of the fighting may lie ahead, military experts said.
Israeli troops have not pushed deep into Gaza City, stormed the maze of tunnels where Hamas’ command is believed to be located, or invaded the enclave’s densely populated south, they added. Some of those tunnels are believed to be around 80 meters deep, making them difficult to destroy from the air.
Michael Eisenstadt, director of the Military and Security Studies Program at the Washington Institute for Near East Policy, said it was probably unclear to all sides, including Hamas, exactly how many of its fighters had been killed.
“If (Israel) could say we’ve killed Sinwar, we’ve killed Marwan Issa, we’ve killed Mohammed Deif, that’s a very clear, symbolic and substantive achievement,” Eisenstadt said, adding that Israel faced a dilemma.
“What if they can’t get the guys? Do they keep fighting until they get them? And what if what if they just prove elusive?“
A MORE ATTAINABLE GOAL
The Israeli military says it has destroyed around 400 tunnel shafts in northern Gaza, but that is only a small part of the network Hamas has built up over the years. At least 70 Israeli soldiers have been killed in the Gaza operation, and some 392 in total, including the Oct. 7 attacks, the Israel Defense Forces (IDF) has said.
A military officer, who briefed reporters on condition of anonymity, estimated roughly around 5,000 Hamas fighters had been killed – equivalent to roughly one fifth of its overall strength. Six battalions – numbering around 1,000 men each — had been significantly degraded, the officer said.
Osama Hamdan, a Lebanon-based Hamas leader, said the casualty figures were false and “Israeli propaganda” to cover its lack of military success.
One Hamas insider in Gaza, reached by phone, said that destroying the group as a military force would mean house to house combat and fighting in the warren of tunnels beneath the enclave, which would take a long time.
“If we talk about a year, we will be optimistic,” he said, adding that the Israeli death toll would rise.
President Joe Biden’s administration sees eliminating Hamas’ leadership as a far more attainable goal for Israel than the country’s stated objective of eliminating Hamas entirely, three US officials told Reuters.
While staunchly supportive of Israel, its closest ally in the Middle East, US officials worry that an open-ended conflict driven by Israel’s hope of destroying Hamas entirely would cause a heavy civilian death toll in Gaza and prolong the risk of a regional war.
The United States learned that lesson over years of battling Al-Qaeda, Daesh and other groups during a two-decade-long global war on terrorism.
Iran-backed militants, who blame the United States for Israel’s bombings in Gaza, are already targeting US troops in Iraq and Syria in wave after wave of attacks. One of the attacks last week injured eight US troops.

EXISTENTIAL THREAT
The shock and fear in Israel engendered by Hamas’ Oct. 7 attack may make it difficult to de-escalate the conflict.
Kobi Michael, a former head of the Palestinian desk at Israel’s Ministry for Strategic Affairs, which counters negative narratives about Israel overseas, said there is strong popular support for the war to continue as Hamas is perceived as part of a broad Iran-backed axis that poses a direct threat to the nation’s survival.
Capturing Sinwar would be an important victory but not necessarily the ultimate one, Michael said.
“Israeli society perceives itself under an existential threat and the options it sees before it are two only: To be or not to be,” he said.
The objective of the war remains to dismantle Hamas’ military and government capabilities, Michael said, which could involve a turbulent period in Gaza after the war. And the greater long-term challenge was to remove the popular appeal to Palestinians of Hamas’ fierce opposition to Israel using education and outreach, he said.
Israel regularly announces the deaths of senior Hamas battalion commanders. An Israeli military officer, who spoke to reporters on condition of anonymity, said the IDF viewed the elimination of such combat-level commanders as essential to dismantling Hamas’ military capabilities.
FAILED ASSASINATIONS
The three Hamas leaders have all escaped numerous Israeli operations to kill them. Deif in particular lives in the shadows after escaping seven assassination attempts before 2021, which cost him an eye and left him with a serious leg injury.
An Israeli air strike in 2014 killed his wife, his three-year-old daughter and seven-month-old son.
Speculation by Israeli and Palestinian sources is that the three men are hiding in the tunnels under the enclave but five sources close to their thinking say they could be anywhere within Gaza.
Sinwar, who unlike the elusive Deif and Issa has often appeared in the past at public rallies, is no longer using any electronic devices for fear the Israelis could track the signal, Hamas sources said.
Issa, known as the ‘Shadow Man’, is perhaps the least well known of the three but has been involved in many of Hamas’ major decisions of recent years, and would replace either of the two other men if they are killed or captured, Hamas sources said.
All three men were born into refugee families that had fled or been expelled in 1948 from areas in the newly created Israeli state.
And all three men have spent years in Israeli prisons. Sinwar served 22 years after being jailed in 1988 for the abduction and killing of two Israeli soldiers and the murder of four Palestinian collaborators.
He was the most senior of 1,027 Palestinian prisoners that Israel freed in 2011 in exchange for one of its soldiers, Gilad Shalit, captured by Hamas in a cross-border raid five years earlier.
Like Deif, Issa’s facial features were unknown to the public until 2011 when he appeared in a group photo taken during the Shalit prisoner’s exchange, which he helped to organize.
Gerhard Conrad, a German Intelligence Agency mediator (BND) from 2009 to 2011, was among the few to have met Issa while negotiating Shalit’s prisoner swap.
“He was very meticulous and careful analyst: that’s my impression of him. He knew the files by heart,” Conrad told Al Jazeera television.
Israel has killed Hamas’ leaders in the past, including the group’s founder Sheikh Ahmed Yassin and its former leader Abdel-Aziz Al-Rantisi, assassinated in a 2004 air strike. New commanders rose to fill their ranks.
“Israel has killed Sheikh Yassin, Rantissi and others but Hamas is not over,” said Hamdan, the Lebanon-based member of the group’s politburo. “Anything might happen in this battle.”