29 June 2017

The Information Technology Authority (ITA) is following up on the new ransomware attack (Petya) that is targeted to the government and private organizations and has been recently observed in some countries around the world. The attack uses the same security gaps used in the previous ransomware attack (WannaCry) by encrypting the files stored in the hard disk and preventing access to the affected device and then ask for a ransom (financial amount).

The team specialized in dealing with such information security incidents analyzed the data of the attack and also analyzed the signature used in the attack and then circulate it to all government entities to apply it in their network protection devices to prevent the attack from spreading in the institutions internal networks and devices.

On the ITA efforts in dealing with this attack, Dr. Bader bin Salim Almanthari, Director General of Information Security Division at ITA, said, "The ITA works in cooperation with the concerned entities to track this attack and other cybersecurity attacks targeting the cyberspace in the Sultanate. With regard to Petya attack, so far we didn't register any case in the Sultanate."

Dr. Bader advices the government and private entities in the Sultanate, saying, "We advise all entities to immediately update their systems, applications and anti-virus programs and continuously spread awareness among their employees and all who deal with the organization systems. Moreover, they have to pay attention to the links and attachments sent through the email, social media accounts and websites. If a direct attack with the virus discovered, the infected devices must be disconnected from the network and Organizations are urged to immediately contact the cybersecurity emergency  response service at ITA at ocert999@ita.gov.om or through the hotline 24166828."

He further warns from directly contacting the source of attacks and not to pay any amounts whatever the damage is, as these attackers seek to achieve financial gain and will not  be contented with small amounts hence will demand additional amounts when respond to their  attacks.”

It is worth mentioning that the Information Technology Authority (ITA) has recently developed the framework of design and security settings for peripherals and smart devices. This framework contains many recommendations and security requirements to protect smart devices and Internet of Things from the dangers of malware, especially ransomware attacks, advanced attacks and data leakage.

-Ends-

ITA is a Public Authority created by Royal Degree 52/2006. ITA endeavours to consolidate and implement the Digital Oman strategy to transform the Sultanate of Oman into a knowledge-based economy for the achievement of social and economic benefits to Omani society. ITA’s vision is ‘Transforming Oman, Empowering You’. For more information, visit www.ita.gov.om or email to eoman@ita.gov.om.

For more information or media clarification, please contact:
Sumaiya Humaid Al Kindi
Media Specialist 
Information & Awareness Division
Telephone:            +968 2414 9513
GSM:                       +968 9540 5850
Fax:                         +968 2416 6604
Email:                      sumaiya.alkindi@ita.gov.om

© Press Release 2017