Threat actors believed to be operating out of Iran are targeting energy and industrial-sector organizations in the Middle East with a destructive disk-wiping malware similar to Shamoon. Shamoon destroyed more than 35,000 Windows systems at Saudi Aramco a few years ago. The new malware is designed to overwrite the master boot record (MBR) and disk partitions on Windows systems. The attacks appear to be targeted and designed specifically to disrupt operations at critical infrastructure organizations in multiple Middle East countries, IBM’s Limor Kessem says.”]

