Since last month a new campaign of cyber attacks have hit the Energy sector, all is started with the incidents to Saudi Aramco and RasGas companies, in both cases a malware infected internal networks without impacting on the production systems. To spread the malware the hackers have used a spearphishing email, containing a malicious attachment, targeting mid-level to senior-level executives. The investigation revealed that the command and control (C&C) servers used in the two campaigns were the same and their IP addresses belong to Chinas Beijing Province Network.”]