"Security” website revealed that a Libyan oil refinery has been targeted by a sophisticated cyberattack as part of an espionage campaign believed to have been ongoing for several months. The campaign reportedly targeted Libya’s oil infrastructure, as well as telecommunications institutions and sensitive government entities. The report indicated that the attackers used malware known as “AsyncRAT,” which enables remote access to targeted systems, allowing them to collect sensitive data, steal login credentials, and monitor activities within infected networks—granting them persistent control. “Security” website noted that the nature and complexity of the campaign, along with its focus on Libyan domestic affairs, may point to the involvement of organized or state-backed actors, increasing the level of threat to the oil sector, a key pillar of the national economy. The report also warned of a global rise in cyberattacks targeting energy infrastructure, calling for stronger cybersecurity measures and increased employee awareness, particularly in handling emails and suspicious attachments.

Source: Libya Observer March 24, 2026 19:54 UTC