Middle East , Mar 13, 2025
Group-IB, a global cybersecurity firm, has released its latest annual report on high-tech crime trends, spotlighting a worrying surge in cyber threats across the Middle East. The report outlines how state-sponsored hacking groups, financially motivated cybercriminals, and ransomware gangs are targeting the region at an alarming rate.
Middle East Sees 65% Surge in Targeted Attacks
According to the report, cyberattacks in the Middle East have increased by over 65% in the past year alone. The key targets include oil and gas companies, government infrastructure, financial institutions, and defense sectors. The attacks range from phishing and ransomware to sophisticated supply chain intrusions.
One of the standout findings was the aggressive use of Ransomware-as-a-Service (RaaS) models, where attackers rent out malicious tools to affiliates. In particular, ransomware groups like LockBit and BlackCat were found to have executed several high-profile attacks in Gulf countries.
State-Sponsored Threat Actors & Espionage
The report also highlights how nation-state actors are using advanced persistent threats (APTs) to conduct cyber espionage in the Middle East. Group-IB attributes many of these operations to hacking groups believed to be backed by foreign governments. Their goals include accessing confidential military and energy data, sowing political discord, and disrupting regional cooperation.
Major Incidents & Data Breaches
Among the notable cases was a multi-million dollar data breach at a major Saudi energy provider, where attackers exploited an unpatched server to steal sensitive industrial information. Additionally, the UAE faced a cyber onslaught on its financial services sector, disrupting services and exposing thousands of user accounts.
Call for Regional Cyber Resilience
Experts say that while Middle Eastern nations are making strides in digital transformation, cybersecurity infrastructure often lags behind. Group-IB stresses the urgent need for inter-governmental cooperation, improved cyber awareness programs, and investment in advanced threat detection systems.
The report concludes that without robust defense mechanisms, the Middle East risks becoming a hotbed for global cybercrime, making it imperative for both the public and private sectors to bolster their digital defenses.
