Cybersecurity Threats In Bahrain: Understanding The Emerging Dangers

Cybersecurity threats in Bahrain are a growing concern, with the country's ICT infrastructure development making it a prime target for cybercriminals. The country has a well-defined national cybersecurity framework led by the General Directorate of Anti-Corruption and Economic and Electronic Security at the Ministry of Interior (MOI). Bahrain's critical infrastructure, including energy, finance, education, and health sectors, is particularly vulnerable to attacks.

Bahrain has experienced several significant cyberattacks, including a major incident targeting its national oil company, Bapco, in 2021. The country has also witnessed cyberattacks on its government computers and critical infrastructure, with suspected links to Iranian state-sponsored hackers.

To combat these threats, Bahrain published a National Cybersecurity Strategy in 2017 and established a National Cybersecurity Committee. The strategy aims to safeguard critical national infrastructure, protect citizens' data and privacy, and foster international collaboration to counter cyber threats.

The country has also implemented various cybercrime legislations, such as the Law No. 60 concerning Information Technology Crimes, and established specialised institutions like the Cyber Crime Directorate and the National Cyber Security Center.

The increasing frequency and sophistication of cyberattacks in Bahrain highlight the need for robust cybersecurity measures and a skilled workforce to protect its critical sectors and citizens' data.

Cyberwarfare: data destruction and hacking of rival businesses

Cyberwarfare is a highly debated topic among experts, with some arguing that the term is a misnomer as no cyber attacks to date have reached the scale and violence associated with the notion of 'war'. However, others argue that the term is suitable when cyber attacks cause physical damage to people and objects in the real world.

Bahrain is no stranger to cyber attacks, with a variety of sectors being targeted in recent years. One of the most common types of cyber attacks in Bahrain is cyberwarfare, which involves the destruction or hacking of a rival business's data. This can lead to long-term losses and is often driven by the desire to gain a competitive edge.

• Espionage: A company may hack into a rival's computer systems to steal sensitive information, such as trade secrets, research data, or financial details. This can give them a competitive advantage and allow them to make strategic decisions based on their rival's internal data.
• Sabotage: A business may gain access to a competitor's systems with the intention of disrupting their operations. This could involve deleting or manipulating critical data, compromising their network security, or even taking control of certain functions.
• Propaganda: Cyberwarfare can also involve spreading propaganda or false information about a rival business. This could be done through social media, fake news websites, or other digital means to influence public opinion and discredit the competitor.
• Economic Warfare: A company may use cyber attacks to directly target a rival's financial assets or disrupt their ability to generate revenue. For example, they could steal customer data and use it for financial gain or compromise their ability to process transactions, causing reputational damage.

It's important to note that cyberwarfare is not always solely driven by financial motives. In some cases, businesses may engage in cyberwarfare to simply hinder a rival's operations or gain a competitive edge. Additionally, non-state actors, such as hacktivist groups, can also play a significant role in the cyberwarfare landscape.

To protect themselves from cyberwarfare, businesses should invest in robust cybersecurity measures, including advanced security systems and staff training. By staying vigilant and adapting to the evolving nature of cyber threats, businesses can safeguard their data and minimize the impact of potential attacks.

Cybercrime: financial gain and data theft

Cybercrime is a significant threat to Bahrain, with a variety of sectors being targeted. The financial industry is one of the most critical branches that require increased cyber protection. In August 2021, the Bank of Bahrain and Kuwait's server was hacked by a Nigerian Cyber Fraud gang, who defrauded the bank of around $739,000. This incident highlights the need for constant improvement in the bank's security and the digital system of the financial industry as a whole.

Another critical sector that has been targeted by cybercriminals in Bahrain is the energy sector. In December 2021, Bahrain's National Oil Company, Bapco, was subjected to a major cyberattack by Iranian state-sponsored hackers. The attackers used a new strain of data-wiping malware called Dustman, which can delete data on infected computers and pose serious threats to the company's performance. This incident impacted only a portion of Bapco's computer system, but it serves as a reminder of the vulnerabilities in the energy sector.

Social media platforms have also become a target for cybercriminals seeking financial gain and data theft. In April 2021, a Facebook data leak affected over 1.4 million users in Bahrain, with personal information such as phone numbers, email credentials, locations, and birthdates being exposed. This incident put users at risk of hijacking, blackmail, and financial fraud.

Cybercriminals also target government computers and critical infrastructure in Bahrain. In August 2019, a series of cyberattacks were reported, with hackers gaining control of the Electricity and Water Authority's systems and causing disruptions. This incident highlights the need for stronger cybersecurity strategies to protect Bahrain's critical infrastructure.

To combat these threats, Bahrain has implemented various measures, including the establishment of a National Cybersecurity Committee and the development of a National Cybersecurity Strategy in 2017. Additionally, the country has a Cyber Crime Directorate under the General Directorate of Anti-corruption and Economic and Electronic Security of the Ministry of Interior Affairs, which is responsible for investigating and reporting on cybercrime. Bahrain also has a National Cyber Security Center that provides consultation in cyber policies, cybersecurity, and security system development.

Overall, cybercrime in Bahrain poses a significant threat to various sectors, including finance, energy, social media, and critical infrastructure. These attacks aim to gain financial profits, steal critical information, and disrupt businesses and government operations. Bahrain has taken steps to address these threats, but the evolving nature of cybercrime requires constant vigilance and adaptation.

Cyber espionage: fraud and data manipulation

Cyber espionage is a significant threat to Bahrain's cybersecurity, with the country being targeted by various cybercriminals and state-sponsored hackers. One notable case is the use of sophisticated malware by the Bahraini government to conduct surveillance on political dissidents, including pro-democracy activists, human rights lawyers, and opposition leaders, both within Bahrain and abroad. This incident led to a criminal complaint being lodged with the UK National Crime Agency, accusing the Bahraini government of breaking British laws prohibiting unauthorized computer surveillance.

Fraud is another prevalent issue, with a variety of scams and cybercrimes targeting individuals and organizations in Bahrain. These include ATM scanners, cyber money laundering, and credit card fraud. In one instance, the Nigerian Cyber Fraud gang hacked the Bank of Bahrain and Kuwait's server, defrauding a significant amount of money. Additionally, social media platforms have become a target for cybercriminals, with a Facebook data leak affecting over 1.4 million users in Bahrain.

Data manipulation is also a concern, with hackers seeking to gain access to sensitive information and critical infrastructure. For example, in 2019, there were reports of cyberattacks on government computers and critical infrastructure in Bahrain, with intruders gaining limited control of parts of the system. Additionally, Bahrain has experienced data breaches in various sectors, including energy, finance, and social media, exposing personal and confidential information.

To combat these threats, Bahrain has implemented various measures, including the publication of a National Cybersecurity Strategy in 2017 and the establishment of a National Cybersecurity Committee. The country has also enacted laws to address cybercrimes, such as Law No. 60 concerning Information Technology Crimes, which lists various offences and procedural powers. Additionally, Bahrain has specialized institutions like the Cyber Crime Directorate and the National Cyber Security Center to investigate and address cyber threats.

Hacktivism: political or social motivations

Hacktivism, a blend of the words "hacking" and "activism", is a form of civil disobedience that uses hacking techniques to promote a political agenda or social change. With roots in hacker culture and ethics, hacktivism often revolves around free speech, human rights, and freedom of information movements.

Hacktivists employ a range of methods, including website defacement, denial-of-service (DoS) attacks, data breaches, redirection, anonymous blogging, doxing, geobombing, and website mirroring. These techniques can blur the line between activism and cybercrime, leading to debates about the ethical and legal implications of hacktivism.

In Bahrain, the National Cybersecurity Strategy, published in 2017, addresses cyber threats, including cybercrime, and led to the creation of a National Cybersecurity Committee. The strategy is currently being updated. Additionally, Bahrain has a Cyber Crime Directorate under the General Directorate of Anti-corruption and Economic and Electronic Security of the Ministry of Interior Affairs, which is responsible for investigating and reporting on cybercrime.

While there is no specific mention of hacktivism in Bahrain, the country has faced various cyber threats and attacks, indicating the need for a robust cybersecurity posture.

Cyber threats to medical devices and patient safety

Medical devices are increasingly connected to the internet, hospital networks, and other devices, providing improved healthcare and treatment abilities. However, these same features also increase potential cybersecurity risks. As such, medical devices, like other computer systems, can be vulnerable to security breaches, which may impact the safety and effectiveness of the device.

In Bahrain, the government has recognized the importance of cybersecurity and has a number of measures in place to protect against threats. These include the National Cybersecurity Strategy, which was introduced in 2017 and addressed threats such as cybercrime, and the National Cyber Security Center, which was established in 2017 and is responsible for providing consultation in the fields of cyber policies, cybersecurity, and security system development.

Despite these measures, Bahrain has experienced several significant cyberattacks in recent years, including:

• A major cyberattack on Bapco, Bahrain's national oil company, in December 2021, which was carried out by Iranian state-sponsored hackers using data-wiping malware called Dustman.
• A series of cyberattacks on government computers and critical infrastructure in August 2019, which were suspected to be linked to the Iranian government. This included an attack on the world's biggest aluminum smelters, Aluminium Bahrain.
• A "zero-click" attack on an activist at the Bahrain Center for Human Rights in August 2021, which took advantage of a security vulnerability in Apple's iMessage.
• A large-scale cyberattack on APM Terminals in June 2017, which compromised its IT systems and led to delays in the transit of shipments.
• A Facebook data leak in April 2021 that impacted over 1.4 million users in Bahrain, exposing personal information such as phone numbers, email credentials, locations, and birthdates.
• A hacking of the Bank of Bahrain in August 2021, where a Nigerian Cyber Fraud gang defrauded the bank of around $739,000.
• A cyberattack on Microsoft's IT sector in November 2021 by Iranian state-sponsored hackers, which aimed to obtain credentials for further compromising customer networks.

While there is no specific information available regarding cyber threats to medical devices in Bahrain, it is clear that the country faces significant cyber threats, and medical devices are vulnerable to security breaches. Therefore, it is essential for Bahrain to continue strengthening its cybersecurity strategies and for medical device manufacturers and health care facilities to implement appropriate safeguards to protect patient safety.

Frequently asked questions