National Government Cybersecurity Solutions & Training

In November 2016 and January 2017, a disk-wiping attack known as Shamoon 2 destroyed data on thousands of computers across government and civil organizations in Saudi Arabia and other Gulf states.

IBM X-Force investigators traced the entry to spear-phishing that began weeks before the wiper ran. The emails carried macro-enabled Office documents dressed up as CVs and HR paperwork, and some referenced Saudi Arabia's Ministry of Commerce and Investment. Once a recipient switched on the document's macro, the attackers had a remote foothold. They also registered lookalike domains, including one imitating the website of the Saudi Industrial Property Authority.

Nothing in these messages asked for money, credentials, or urgency. They asked for something far smaller: to let a document display properly. Enabling a macro is a prompt many office workers have learned to click through without reading, because refusing it usually means a broken file and a delayed task. The entire intrusion was hidden behind a habit.

The institutional setting did the rest. Government staff handle a steady flow of paperwork from other ministries and public bodies, and acting on it promptly is part of doing the job well. Questioning a document that appears to come from a ministry can feel presumptuous in a hierarchy, and the attackers counted on that: a request wearing the right letterhead is rarely challenged by the person it reaches.

Simulations work best when they look like the mail a government employee receives every day. Fraus runs campaigns in Arabic and English, Dolus AI Studio rebuilds real lures that reached your staff into editable templates, and Whitebait's Delivery Fabric supplies the simulation domains. Inter-entity correspondence, HR documents, and recruitment pretexts can all be rehearsed safely.

Officials with public roles have public footprints. Blackbait runs OSINT reconnaissance on the people you select, shows what an outsider can learn about them, and tests how they respond under sustained, escalating pressure.

Odin applies one scoring model across ministries, entities, and authorities, with risk visible from individual officials to executive leadership and automatic escalation at critical thresholds. Codex covers deepfake awareness for impersonation of senior figures.

Fraus is built for government requirements in the region. It runs fully on-premise under national control, supports Arabic natively, and is UAE IA compliant, ISO/IEC 27001 certified, and aligned with the NIST Cybersecurity Framework.