Dz hackevent 2019 Middle East Cyberwars V3

1. Are you ready?
Middle East
Cyber-wars
2019 Algiers, Algeria
Jorge Sebastiao, CISSP
CTO, Huawei
1

2. Disclaimer & Copyright
• Please note that this presentation is for informational, knowledge sharing and educational purposes only. Any
comments or statements made herein do not necessarily reflect the views of Huawei. The information is intended
for the recipient's use only and should not be cited, reproduced or distributed to any third party without the prior
consent of the authors. Although great care is taken to ensure accuracy of information neither the author, nor
Huawei can be held responsible for any decision made on the basis of the information cited.
• The content of this presentation is based on information gathered in good faith from both primary and
secondary sources and is believed to be correct at the time of publication. The author can however provide no
guarantee regarding the accuracy of this content and therefore accepts no liability whatsoever for any actions
taken that subsequently prove incorrect.
• The practices listed in the document are provided as is and as guidance and the author and Huawei do not claim
that these comprise the only practices to be followed. The readers are urged to make informed decisions in their
usage.
• The information presented in this presentation is not intended to be, and should not be construed as, an offer to
sell any products or services or a solicitation of an offer to buy any products or services . Any such offer or sale will
be made pursuant to, and the information presented at this meeting is qualified in its entirety by, authorized
offering documents and related disclosure schedules or similar disclosure documentation.
• All logos and brand names belong to their respective owners and we do not claim any relationship or association,
implied or otherwise, with them.
• Use of any materials by virtue of relationships and associations, if any, are mentioned explicitly.
• Author has taken care to attribute all sources for external materials used in this presentation, and any oversight is
regretted. If you, as owner, or as viewer, find any reason to dispute the use of these materials kindly communicate
the same to author.
• Any omissions, in terms of attribution, may be due to an error of author and not intentional.

3. Middle East+++

4. Arms Race
• US
• Israel
• Turkey
• Iran
• Saudi Arabia
• UAE
• Pakistan
• India

5. Submarine cable cut

6. 3 Major Incidents in Egypt
Lighting striked 3 times….
No Incident Date
1 Fiber Cable Cut Jan-Feb 2008
2 Egyptian revolution 25 Jan 2011
3 Egyptian revolution 30 June 2013

7. 25 Jan 2011, 30 June 2013 Egypt
Arab Spring, Arab Autumn

8. Wake up call War and Cyber war
•Stuxnet (Iran)
•Shamoon (SA, Qatar)

9. National Disasters
“Big Risk…”

10. Cyber Attack Recovery Agility Risk
Active
Business
Can you
successfully
recover?

11. Glass house of Critical Infrastructures

12. Bangladesh vulnerable to cyber
attacks
1

13. Right Risk
Appetite?

14. ME Mobiles networks –
Defending 300Gbps DDOS

15. Mercenaries Behind APT Attacks

16. 0 Day Exploits - Guaranteed

17. Why Israel Hacks

18. Pakistan tightens cell-phone control
after Taliban massacre

19. Regin backdoor used to
compromise the GSM Networks

20. Regin India under the radar

21. Creative Weapons
2

22. Honey-trap cyber spies stole
Syrian rebel plans
2

23. Syrian Electronic Army posts
hacking message on several news
sites
2

24. Syrian Electronic Army hacks
Forbes, steals user data
2

25. TV5Monde Succumbs to Cyber-attack
2

26. France TV5Monde passwords seen on
cyber-attack TV report
2

27. Reconnaissance Tool Linked to
French Intelligence Malware Babar-
Casper

28. British spies helped find Afghan trove
of al Qaeda plans - LAPTOP

29. Al Qaeda and the Internet: The
Danger of “Cyberplanning”

30. ISIS Backers Used at Least 46,000
Twitter Accounts in 2014

31. 5elafabook.com
Islamic State's version of Facebook?

32. Website Defacement:
ISIS Hackers vs. WordPress

33. Islamic State posts pictures of 100 US
military on 'kill list'

34. ISIS Cyber Ops: Empty Threat or
Reality?

35. 'Cyber Caliphate' hacks Malaysia
Airlines website

36. Jihadists are turning to the 'Dark
Web' to avoid being tracked

37. Anonymous targets ISIS, 'advanced'
attacks & TV takeover

38. Iran: Project Pistachio Harvest

39. Iran: Project Pistachio Harvest

40. Targeting nuclear power plants

41. Iranian Hackers Eye U.S. Grid

42. IRANIAN General Promises Robot
SOLDIERS

43. Ground control: Analysts warn airplane
communications systems vulnerable to hacking

44. A Declaration of Cyber-War

45. Security firms Iran report mostly hype

46. Cyber War Games: Top 3 Lessons
Learned About Incident Response
1.Designate Crisis
Officer
2.Be sceptical
3.Resist
Finger
Pointing

47. Largest ever UK cyber-terror
simulation

48. Its all about agility and time…

49. Lessons Learned
1.Don’t throw rocks if your house
made out of glass
2.Basics fail
3.Agility and Attribution matter
4.Protect Critical Infrastructure
5.Learn out to counter Social Media

50. Questions
Jorge Sebastiao, CISSP
CTO, Huawei