Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Stuxnet worm 'targeted high-value Iranian assets'
BBC ^ | 9/24/10 | Jonathan Fildes

Posted on 09/23/2010 9:06:20 AM PDT by therightliveswithus

One of the most sophisticated pieces of malware ever detected was probably targeting "high value" infrastructure in Iran, experts have told the BBC.

Stuxnet's complexity suggests it could only have been written by a "nation state", some researchers have claimed.

It is believed to be the first-known worm designed to target real-world infrastructure such as power stations, water plants and industrial units.

(Excerpt) Read more at bbc.co.uk ...


TOPICS: Foreign Affairs; Front Page News
KEYWORDS: iran; stuxnet
Navigation: use the links below to view more comments.
first 1-2021 next last
Rumored to target nuclear sites....!
1 posted on 09/23/2010 9:06:21 AM PDT by therightliveswithus
[ Post Reply | Private Reply | View Replies]

To: therightliveswithus
Could it be that Bibi and his boys are doing the work that others refuse to do?
2 posted on 09/23/2010 9:14:34 AM PDT by JPG (Care for another lobster, Mookie? How's your steak? Ready for another triple Stoli/rocks?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: therightliveswithus
“Unlike most viruses, the worm targets systems that are traditionally not connected to the internet for security reasons.”

“Instead it infects Windows machines via USB keys - commonly used to move files around - infected with malware.”

“Once it has infected a machine on a firm’s internal network, it seeks out a specific configuration of industrial control software made by Siemens.”

Sounds like the Israelis to me, but maybe the CIA.

3 posted on 09/23/2010 9:18:04 AM PDT by mojito
[ Post Reply | Private Reply | To 1 | View Replies]

To: therightliveswithus

Stuxnet leverages four zero-day exploits, and IIRC two digital authentications.

It was also created to be self-limiting (only three copies per instance) so that it wouldn’t infect too far afield.

Only a nation state - or SMERSH - could have the manpower and resources to have created Stuxnet. Given that Stuxnet has mainly effected Iranian SCADA, I think we all know who wrote it.

Stuxnet - the first virus I have applauded.


4 posted on 09/23/2010 9:18:30 AM PDT by agere_contra (...what if we won't eat the dog food?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: therightliveswithus; rdb3; Calvinist_Dark_Lord; GodGunsandGuts; CyberCowboy777; Salo; Bobsat; ...

5 posted on 09/23/2010 9:19:21 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mojito

You probably already know this, but the Bushehr power station is a clone of one in Germany, and has loads of Siemen’s SCADA.


6 posted on 09/23/2010 9:21:13 AM PDT by agere_contra (...what if we won't eat the dog food?)
[ Post Reply | Private Reply | To 3 | View Replies]

To: JPG
Could it be that Bibi and his boys are doing the work that others refuse to do?

Decades ago in college, the Iranian foreign students were huge in the automated fields. The ones I know were too freedom loving (this is pre-Khomeini, mid-Carter) to ever give their hearts to those despots.

I'm betting this is internal sabotage by the brilliant computer geeks that are there or ex-patriated.

7 posted on 09/23/2010 9:29:30 AM PDT by xzins (Retired Army Chaplain and proud of it. Those who truly support our troops pray for their victory!)
[ Post Reply | Private Reply | To 2 | View Replies]

To: therightliveswithus
Stuxnet was first detected in June by a security firm based in Belarus, but may have been circulating since 2009

This is a strange place for something like this to be first detected and even stranger for the English to disclose to the public if it is aimed at Iran. Sounds like it is not web-based, but infection comes from USB pin drives or PLC's. And Siemens designs were the target? With infection in a few countries where Siemens was not a major supplier. Could it be that they know that Iran has copied Siemens technology. Very strange article, and the English have a history of being artists at sig/intel and stealth. Not necessarily technology.

8 posted on 09/23/2010 9:34:02 AM PDT by Texas Fossil (Government, even in its best state is but a necessary evil; in its worst state an intolerable one.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: xzins
You make a good point. Plenty of very smart Iranians around who would love to see the existing regime go ‘poof’.
9 posted on 09/23/2010 9:36:11 AM PDT by JPG (Care for another lobster, Mookie? How's your steak? Ready for another triple Stoli/rocks?)
[ Post Reply | Private Reply | To 7 | View Replies]

To: therightliveswithus
Magnificent !
10 posted on 09/23/2010 9:41:14 AM PDT by ßuddaßudd (7 days - 7 ways Guero >>> with a floating, shifting, ever changing persona.....)
[ Post Reply | Private Reply | To 1 | View Replies]

To: agere_contra

I didn’t know that, but it certainly makes sense given this virus’ very particular targets.


11 posted on 09/23/2010 9:49:58 AM PDT by mojito
[ Post Reply | Private Reply | To 6 | View Replies]

To: Texas Fossil
I don't think that the first appearance in Belarus is that surprising, given that it's the Russians who are providing the nuclear know-how to the Iranians.

Siemens claims that they haven't provided any technology to Iranian nuclear plants, but I'm sure that the Iranians have either cloned Siemens designs, as you suggest, or more probably, simply obtained Siemens systems on the black market, probably via Russia.

12 posted on 09/23/2010 9:55:18 AM PDT by mojito
[ Post Reply | Private Reply | To 8 | View Replies]

To: xzins

“I’m betting this is internal sabotage by the brilliant computer geeks that are there or ex-patriated.”

Sounds like Israelis, to me.


13 posted on 09/23/2010 10:00:02 AM PDT by TheThirdRuffian (Nothing to see here. Move along.)
[ Post Reply | Private Reply | To 7 | View Replies]

To: JPG

“Could it be that Bibi and his boys are doing the work that others refuse to do?”

So long as it can achieve the same objective, this seems like a far less risky avenue to shutting down Iran’s nuclear capabilities than would a military attack. There’s times when you want your fingerprints all over a military operation and other times you don’t. Given the short fuse of I’mANutJob, messing him up covertly rather than overtly is not a bad plan.


14 posted on 09/23/2010 10:01:33 AM PDT by DrC
[ Post Reply | Private Reply | To 2 | View Replies]

To: DrC

Has the malware spread to the refining facilities? If so, that would be just too sweet!


15 posted on 09/23/2010 10:14:44 AM PDT by WellyP
[ Post Reply | Private Reply | To 14 | View Replies]

To: onedoug

ping


16 posted on 09/23/2010 10:24:57 AM PDT by windcliff
[ Post Reply | Private Reply | To 1 | View Replies]

To: therightliveswithus

From the story it appears that the worm was designed to operate on stand-alone, not internet connected SCADA systems (Supervisory Control And Data Acquisition).

SCADA systems use PLC’s (Programmable Logic Controllers) to remotely operate machines and processes in an automatic fashion. The PLC’s also send back data to the system for analysis and storage.

Apparently the worm was designed to reprogram the PLC’s and disrupt their function.

Good stuff...


17 posted on 09/23/2010 10:29:30 AM PDT by telebob
[ Post Reply | Private Reply | To 1 | View Replies]

To: windcliff

Part 1?


18 posted on 09/23/2010 10:43:53 AM PDT by onedoug
[ Post Reply | Private Reply | To 16 | View Replies]

To: therightliveswithus; left that other site
Rumored to target nuclear sites....!

Iranian nuclear sites! Life is good!

19 posted on 09/23/2010 12:49:50 PM PDT by GOPJ (http://www.freerepublic.com/focus/f-bloggers/2589165/posts)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mojito

Why wouldn’t the Russian target their own systems? Lots of other people to blame it on. It would be like and endless ATM.


20 posted on 09/23/2010 12:56:00 PM PDT by listenhillary (A 50% cut of federal spending would be a good place to start.)
[ Post Reply | Private Reply | To 12 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson