Security Horizons

Governments, private companies, educational institutes, and individuals in the Middle East region have embraced advanced technology and digitalization on a massive scale. It has resulted in more and better job opportunities and money circulation. According to statistics, millions of home users joined cyberspace and social networking websites and with the emergence of social media, many have been blessed with various monetary opportunities.

However, just like a coin has two sides–good and bad–the internet came with increased frequency and scope of cyberattacks, cybercrime, cyberterrorism, malware, digital espionage, and violations of privacy. The Middle East area and its businesses have been facing several challenges regarding cybersecurity. This article sheds light on the glimpses of Cyber Terrorism and its solutions for the Middle East’s digital defenses.

What is Cyber Terrorism?

Since the term ‘Cyberterrorism’ is hotly debated, some academics choose to define it narrowly, concentrating on attacks on information systems by well-known terrorist groups with the intention of endangering society and questioning its security. Additionally, it may entail the deliberate use of networks, the Internet, and cyberspace to further one’s own, sometimes political or ideological, goals at personal expense. It is a real security issue nowadays and as the nations in the Middle East region continue to embrace digital transformation, the vulnerabilities within their cybersecurity frameworks have become more apparent. Additionally, it can also affect financial and transport infrastructure, nuclear security, etc.

As a target set shifts from tactical, as in the case of deployed armed personnel, to strategic, as in the case of civilian infrastructure, experts in the field are still unable to forecast the collateral damage for all cyberattacks. Attacks that render a network inoperable have the potential to harm not just the target but also non-combatants or even the attacker. This makes it challenging to forecast the possibility of unforeseen effects.

Current Landscape of Cyber Terrorism in the Middle East

In the past year, the Middle East has witnessed a surge in cyber attacks, targeting critical infrastructure, government entities and businesses. As per the Group-IB ‘Hi-Tech Crime Trends 2022/2023’ research, the UAE (33%), Saudi Arabia (29%) and Kuwait (21%), were the most often targeted countries in the Persian Gulf region. One notable incident involved a sophisticated ransomware attack on a major oil facility in the Gulf, causing widespread disruption to energy supplies and economic repercussions.

Another concerning development was the rise of state-sponsored cyber campaigns, with nation-states engaging in cyber warfare to gain geopolitical advantages. Attribution in the cyber realm remains a challenge, but intelligence agencies point to increased activity from state-sponsored groups originating in the region.

Exploring the Cyberthreat Landscape

In the Middle East, computers, servers and network equipment are the targets of 78% of cyberattacks on enterprises. The cyberattack system disables security mechanisms, provides attackers nearly total control over hacked devices and guarantees persistence throughout the infrastructure. As far as threat actors go, this kind of malware is very common, especially with APT outfits.

Moreover, in malware attacks against people, spyware is now widely used. Attackers typically disseminate it by pretending to be legitimate apps like VPN services or programs for making virtual phone numbers. The Middle East’s usage of wipers in malware attacks by malevolent entities is a geographical characteristic. The device crashes as a result of this malware erasing all user and system files on it. When wipers infiltrate ICS equipment, it can lead to technological malfunctions and even emergency circumstances, making it a very dangerous scenario. A significant attack on three Iranian steel factories in the second quarter of 2022 caused production to be disrupted. The assailants at one of the plants succeeded in toppling a steel container that was molten, setting the manufacturing floor on fire.

Solutions to Enhance Cybersecurity in the Middle East

Addressing the rising tide of cyberterrorism requires a multi-faceted approach involving collaboration between governments, private sector entities and international partners. Here are some key solutions tailored to the Middle East’s cybersecurity challenges:

• To guarantee the security and safety of user data, Qatar has put in place measures for enterprises in line with Law No. 13 of 2016 on Personal Data Privacy safety.
• On August 1, 2019, Bahrain passed the Personal Data Protection Law (PDPL). It was fashioned after the European Union, and violators may go to jail for up to a year.
• Federal Law No. 45, or the UAE Data Protection Law, was released by the United Arab Emirates in November 2021. It lays out more stringent privacy and data protection guidelines as well as the responsibilities and rights of all parties involved in the processing of personal data.

Conclusion

As the Middle East grapples with the challenges of cyber terrorism in 2024, the need for robust cybersecurity measures has never been more apparent. By adopting proactive strategies, enhancing collaboration, and investing in advanced technologies, nations in the region can fortify their digital defenses and mitigate the impact of cyber attacks. The evolving nature of cyber threats requires continuous adaptation and vigilance, making cybersecurity a top priority for the prosperity and security of the Middle East in the digital age.