Iranian nuclear program stalled by sophisticated computer virus

[sonick]

A new super computer virus called "stuxnet" is attacking Iranian's nuclear infrastructure. It specifically targets equipment made by Siemens. It's estimated it was in their system, undetected, for over a year.

When it was discovered and a security bulletin was released online, all the sites relating to the virus went under attack for 24 hours.

Researchers are saying that it likely came from a nation state, not just some hacker.

EDIT: The plot thickens as an Iranian Stuxnet expert was assassinated in Tehran http://www.tgdaily.com/security-feat...ated-in-tehran

Crazy article explaining the virus. Some blockbuster movie type stuff here: http://www.foxnews.com/scitech/2010/...est=latestnews

Computerworld article: http://www.computerworld.com/s/artic...taxonomyId=142

Wiki: http://en.wikipedia.org/wiki/Stuxnet

[rslater]

Epic...

[twitchyzero]

that's some pretty scary.

[tool001]

stuxnet could be iran specific, but it affected programs, nuclear or otherwise in other countries as well

[Shorn]

first example of cyberwarfare.. they speculate that israel decided to use a cyberattack rather than a military strike to disable iran's nuclear program.. smart.

the thing is this is only a one time thing though, can't happen again.. the virus got in through careless employees bringing it in through thumb drives. you can bet they'll change those rules really quick now haha

[gdoh]

thats some crazy shit

[FN-2199]

I foresee a movie adaptation in the future.

[!Nhan]

Looks like it'd make for a good plot with computers taking over and robots. Maybe call the computer program skynet and call the movie terminator...o wait
Posted via RS Mobile

[gloors]

Shiiiit son virus attack
Posted via RS Mobile

[Manic!]

So who was the idiot checking his face book while at work at the nuclear plant?

[MindBomber]

[CanadaGoose]

Weaponized malware...wow, and I thought uncloseable pop ups were bad enough lol

One of the articles said the application of Stuxnet would've been like an F-22 appearing over a WWI battlefield... unreal

*edit* uh oh I typed the word Stuxnet, now the NSA and their little Narus super computer has redflagged me, and my internet and house are gonna get wire tapped

[Jsunu]

Creepy how this could be state run. 4 Zero-days and 2 stolen certificates as well as a deep understanding of the industrial production of nuclear weapons :O. Can't be just simple group of hackers.

[Culverin]

Originally Posted by E N D L E S S

One of the articles said the application of Stuxnet would've been like an F-22 appearing over a WWI battlefield... unreal

Correction, that's the F-35.
The F-22 is a decade years older than the F-35

[Slifer]

Swordfish 2?

[maxx]

^^^????
Die Hard 4.. helloo??

[murd0c]

[deep87]

[TheKingdom2000]

Originally Posted by Jsunu

Creepy how this could be state run. 4 Zero-days and 2 stolen certificates as well as a deep understanding of the industrial production of nuclear weapons :O. Can't be just simple group of hackers.

Once allowed entry, the worm contained four “Zero Day” elements in its first target, the Windows 7 operating system that controlled the overall operation of the plant. Zero Day elements are rare and extremely valuable vulnerabilities in a computer system that can be exploited only once. Two of the vulnerabilities were known, but the other two had never been discovered. Experts say no hacker would waste Zero Days in that manner

Read more: http://www.foxnews.com/scitech/2010/...#ixzz16jqK1BGx

i still don't get what a zero-day is?
and why it can only be used once?

and what did they mean when they said, "no hacker would waste zero days in that manner?"
and two zero days were already known?

sorry, i'm just confused =s

[deep87]

A Zero day virus is a previously-unknown computer virus or other malware for which specific antivirus software signatures are not yet available.

Traditionally, antivirus software relies upon signatures to identify malware. This can be very effective, but cannot defend against malware unless samples have already been obtained, signatures generated and updates distributed to users. Because of this, signature-based approaches are not effective against zero-day viruses.

Most modern antivirus software still use signatures, but also carry out other types of analysis

[stylez2k4]

Originally Posted by mx703

i still don't get what a zero-day is?
and why it can only be used once?

From Wiki:

For viruses, Trojans and other zero-day attacks, the vulnerability window follows this time line:

The developer creates software containing an (unknown) vulnerability
The attacker finds the vulnerability before the developer does
The attacker writes and distributes an exploit while the vulnerability is not known to the developer
The developer finds the vulnerability and starts developing a fix.

and what did they mean when they said, "no hacker would waste zero days in that manner?"

I'm guessing no traditional hacker would want to waste exposing two vulnerabilities at the same time.

[haymura]

[chouchou]

this is insane. right out of movie scripts.
it's true: technology is going to advance the world... then destroy it.

[MindBomber]

Originally Posted by chouchou

technology is going to advance the world... then destroy it.

Technology already has advanced the world, now its in the process of destroying it.

[Jegz]

Cmon Iran use Norton or at least adaware