Second Wave Of Shamoon Attacks In Saudi Arabia

Last November Unit 42, Palo Alto Networks threat intelligence research arm, reported on Shamoon attacks in Saudi Arabia. It is now reporting a second wave of attacks in a new blog post:

In November 2016, we observed the re-emergence of destructive attacks associated with the 2012 Shamoon attack campaign. We covered this attack in detail in our blog titled Shamoon 2: Return of the Disttrack Wiper, which targeted a single organization in Saudi Arabia and was set to wipe systems on November 17, 2016. Since our previous publication, we have found another, similar but different payload used to target a second organization in Saudi Arabia that was configured to wipe systems twelve days later on November 29, 2016. This latest attack potentially materially impacts one of the primary countermeasures employed against wiper attacks: Virtual Desktop Interface snapshots.

More information here http://researchcenter.paloaltonetworks.com/2017/01/unit42-second-wave-shamoon-2-attacks-identified/