Stuxnet: Anatomy of a Computer Virus

[drokkr]

[brettheaslewood]

very interesting! reading all into it now!

[volcanogeorge]

Very flashy video, not a great deal of depth but gives you a good primer about it. There's a TED talk about it that explains how it exploits a quite sophisticated man-in-the-middle type attack to control the system itself while feeding what is essentially a "recording" of a normal data stream to the operator to make it look like everything is normal.

http://www.ted.com/talks/lang/eng/ralph ... eapon.html

[Sheff]

interesting video

[pompende]

ty.... hoping some1 will comment on accuracy

[nowaysj]

Dope. The future is just so warm and fuzzy.

[alphacat]

Stuxnet has infected a Russian nuclear plant and the Space Station




The problem with creating Stuxnet, the world's most sophisticated malware worm, is that it could eventually go rogue. Which is precisely what has happened. The US- and Israeli-built virus has spread to a Russian nuclear plant — and even the International Space Station.

Stuxnet is an incredibly powerful computer worm that was created by the United States and Israel to attack Iran's nuclear facilities. It initially spreads through Microsoft Windows and targets Siemens industrial control systems. It's considered the first malware that both spies and subverts industrial systems. It's even got a programmable logic controller rootkit for the automation of electromechanical processes.

Let that last point sink in for just a second. This thing, with a little bit of coaxing, can actually control the operation of machines and computers it infects.

For more on Stuxnet, I highly encourage you to watch this sobering TED talk by Ralph Lagner where he describes it as "a 21st century cyber weapon."



This thing is seriously badass, and now it's on the loose. Speaking to journalists in Canberra, Australia, last week, Eugene Kaspersky — the head of the anti-virus and cyber protection firm with the same name — was tipped off about the damage by a colleague who works at the Russian plant.

The Times of Israel reports:

Kaspersky did not say when the attacks took place, but implied that they occurred around the same time the Iranian infection was reported. He also did not comment on the impact of the infections on either the nuclear plant or the space station, but did say that the latter facility had been attacked several times.

The revelation came during a question-and-answer period after a presentation on cyber-security. The point, Kaspersky told reporters at Australia's National Press Club last week, was that not being connected to the Internet — the public web cannot be accessed at either the nuclear plant or on the ISS — is a guarantee that systems will remain safe. The identity of the entity that released Stuxnet into the "wild" is still unknown (although media speculation insists it was developed by Israel and the United States), but those who think they can control a released virus are mistaken, Kaspersky warned. "What goes around comes around," Kaspersky said. "Everything you do will boomerang." [emphasis added]
Yikes. Apparently, the virus spread to the International Space Station on a Stuxnet-infected USB stick that was transported by Russian cosmonauts.

Stuff like this worries the hell out of me, particularly when I think about the potential for weaponized AI — weak and narrow systems that will work outside of human comprehension and control. Not the kind of thing we'll want to have "boomeranging" on us.

[alphacat]

Stuxnet infection possibly contributed to Fukushima failure.

[nowaysj]

Not even going to read that fucking link. I might hurt myself or inanimate objects.

[ezza]

makes me thik of some crazy action thriller movie

selling codes for £100,000 on th black-market and disarming countries

[nowaysj]

[alphacat]

Aw, the ISS thing was bunkem apparently. Not the Russian reactor though.

http://www.space.com/23568-stuxnet-iss- ... pid=514648

[nowaysj]

Would be cool if stux could get into our orbital nuclear arsenal. We all could go down to a playground near our city and watch the blast wave. Our fingers could get caught up in chain link fences as we turn to ash.

[_ronzlo_]

The Only Way You Can Delete This NSA Malware Is to Smash Your Hard Drive to Bits

[finji]

yeah formatting means fuck all now

secure disk erasure =

another good article while were at it http://arstechnica.com/security/2015/02 ... d-at-last/

[mks]

^ Good article. I was reading about this earlier today. This malware has been hidden for 14 years!!

[Phigure]

yeah malware that hides itself in RAM to avoid getting erased isnt unheard of but that takes it to whole new levels

theyve got a knack for naming their shit tho:

Third, other Equation Group source code makes reference to "STRAITACID" and "STRAITSHOOTER." The code words bear a striking resemblance to "STRAITBIZARRE," one of the most advanced malware platforms used by the NSA's Tailored Access Operations unit. Besides sharing the unconventional spelling "strait," Snowden-leaked documents note that STRAITBIZARRE could be turned into a disposable "shooter." In addition, the codename FOXACID belonged to the same NSA malware framework as the Grok keylogger.

makes me want to buy a 303 and put out tracks under the name STRAITACID

[cyclopian]

the NSA is run by bonzi buddy