Computer super-virus 'targeted Iranian nuclear power station

[TrueBlueTerrier]

http://www.dailymail.co.uk/sciencetech/ ... l?ITO=1490" onclick="window.open(this.href);return false;

he world’s first cyber ‘super weapon’ may have been designed to attack a nuclear power station in Iran, experts believe.

A computer virus called Stuxnet has been described as the most sophisticated 'worm' ever created and has already infected more than 45,000 networks worldwide.

A 'worm' is a type of computer virus that can reproduce by sending copies of itself to any PC that is connected to the infected machine.

Now internet security experts fear that Stuxnet, which was first detected in June, is the first 'worm' specifically created to target real-world infrastructure such as power stations and water plants.

The Bushehr nuclear plant may have been the target for the cyber attack, experts believe

And they say that it is so sophisticated that only a country with a high level of computer programming know-how would have been able to create it.

Many believe that it was designed to attack important industrial facilities in Iran including the Bushehr nuclear power plant which was originally due to open last month.

After it has hijacked a PC, Stuxnet looks for Siemens software that runs industrial control systems in facilities like factories and power plants.

It then launches an attack by reprogramming software to give any industrial machinery new, potentially dangerous, instructions.

It is capable of taking control of key processes and is able to set off a sequence that could cause the entire system to self-destruct, say experts.

David Emm, a senior security researcher at Kaspersky, said what made Stuxnet different from other viruses was its targeted nature.

His firm has worked with Microsoft to find holes in their code which could be exploited by the worm.

Mr Emm said: What sets it apart is that it is not indiscriminate. Most viruses that are created are normally blasted out like a blunderbuss. But Stuxnet is written to only target a certain systems.

'It finds flaws in code and uses it like an open window in a house, like a jemmy to make a bigger gap', he said.

He said that Stuxnet appeared to have been designed purely for sabotage.

Ralph Langner, a German cyber-security researcher, has reverse-engineered the Stuxnet code and made his findings public. He said he is convinced the virus was designed to seek out and destroy key pieces of infrastructure.

He said: ‘Stuxnet is a 100-percent-directed cyber attack aimed at destroying an industrial process in the physical world. This is not about espionage, as some have said. This is a 100 percent sabotage attack.’

Iran was hardest hit by Stuxnet with nearly 60 per cent of all infected PCs found there.

Mr Langer believes that the Bushehr nuclear plant was the intended target for the attack.

Bushehr is currently being loaded with nuclear fuel but was not switched on in August as had been planned.

Mr Langer says that the sophistication of the virus means that only a ‘nation state’ could have developed it.

He wrote: 'With the forensics we now have it is evident and provable that Stuxnet is a directed sabotage attack involving heavy insider knowledge.

'This is not some hacker sitting in the basement of his parents' house. To me, it seems that the resources needed to stage this attack point to a nation state.'

Mr Langer also believes that Stuxnet virus has already hit its target - we just haven't heard about it yet.

[TrueBlueTerrier]

After it has hijacked a PC, Stuxnet looks for Siemens software that runs industrial control systems in facilities like factories and power plants.

Does RM use Siemens machines - if so I hope the IT security is up to snuff. Mind you this is the Daily Maul sorry Mail and we know how trust worthy they are

[andy2007]

I don't think so. But all, but one of the security holes in Windoze have been closed now. So that will temporarily stop the Worm. All we have to worry about now, is the authors updating it, to get around the security patch.

RM shouldn't have anything to worry about though. It seems to be specifically aimed at automated systems, controlling infastructure. There's still too much of RM's proceses which aren't automated yet. But the fact that it seems to have been aimed specifically at a Nuclear Power Station. And was designed to make it self-destruct. Well, needless to say, I'm worred. We all know what happens when a Nuclear Power Station suffers a Meltdown.

Here's a link to Microsoft and Kaperky's announement about their efforts to close the holes in Windoze security, which were letting it in: http://www.prosecurityzone.com/Customis ... y_Labs.asp" onclick="window.open(this.href);return false;

[heapsy]

A product of the CIA by any chance?

[andy2007]

I doubt that even the CIA would be crazy enough, to unleash something like that. There's too much risk of it hitting one of their own Reactors. If the code, made it only attack specifc countries, then they'd be a likley candiate But it's infected computers in other countries too.