IRN2 Targets Saudi Arabian Oil and Gas Industry with Career-Themed Phishing Attack
released on 2018-08-21 @ 01:41:15 PM
Iranian cyber actors, in the Summer of 2017,
compromised a website of Doosan Power Systems
India (DPSI) in order to conduct a targeted spearphishing
campaign against Saudi Aramco affiliates.
DPSI is a subsidiary of Doosan Heavy Industries &
Construction, the infrastructure support business of
South Korean conglomerate Doosan Group. Doosan
Heavy Industries & Construction, headquartered in
Changwon, South Korea, is a power company with
business in the manufacturing and construction
of nuclear power plants, thermal power stations,
turbines, generators, and other power equipment.
The company is also responsible for engineering,
procurement, and construction at Saudi Aramcoaffiliated
companies.