« previous next »
Pages: [1]

Author Topic: stuxnet malware "weapon"  (Read 5312 times)

geronimotwo

  • friend
  • Senior Member
  • ***
  • Posts: 3,796
stuxnet malware "weapon"
« on: September 22, 2010, 03:15:44 PM »
this new type of worm is designed to attack a specified industrial process.  although no one is entirely sure whose process is at risk, they suspect it is for the iranian bushehr nuclear plant.

http://news.yahoo.com/s/csm/327178

any thoughts on who might want to develop this cyber-terror?
Report to moderator   Logged
make the world idiot proof.....and you will have a world full of idiots. -g2

PTK

  • friends
  • Senior Member
  • ***
  • Posts: 4,318
Re: stuxnet malware "weapon"
« Reply #1 on: September 22, 2010, 03:35:10 PM »
I think Yahoo is, as usual, playing it up. This smacks of absurdity - manual and hydraulic controls aren't connected to the internet - PERIOD.
Report to moderator   Logged
"Only lucky people grow old." - Frederick L.
September 1915 - August 2008

"If you really do have cancer "this time", then this is your own fault. Like the little boy who cried wolf."

tyme

  • expat
  • friend
  • Senior Member
  • ***
  • Posts: 1,056
  • Did you know that dolphins are just gay sharks?
    • TFL Library
Re: stuxnet malware "weapon"
« Reply #2 on: September 22, 2010, 03:45:04 PM »
Huh?  Stuxnet does not rely on access to the intarwebnet.
Report to moderator   Logged
Support Range Voting.
End Software Patents

"Four people are dead.  There isn't time to talk to the police."  --Sherlock (BBC)

PTK

  • friends
  • Senior Member
  • ***
  • Posts: 4,318
Re: stuxnet malware "weapon"
« Reply #3 on: September 22, 2010, 03:59:53 PM »
...to get on the target machine? It would need some form of hookup, no matter how many separations from the connection to the internet (USB and flash drive, CD, etc.) it would still need to have been exposed. I'm just not seeing how a computer that controls extremely important sensitive items would ever be attached to the internet for any reason. =|
Report to moderator   Logged
"Only lucky people grow old." - Frederick L.
September 1915 - August 2008

"If you really do have cancer "this time", then this is your own fault. Like the little boy who cried wolf."

cassandra and sara's daddy

  • friends
  • Senior Member
  • ***
  • Posts: 20,781
Re: stuxnet malware "weapon"
« Reply #4 on: September 22, 2010, 04:22:54 PM »
Stuxnet might have been spread by the USB memory sticks  used by a Russian contractor while building the Bushehr nuclear plant, Langner offers. The same contractor has jobs in several countries where the attackware has been uncovered.
Report to moderator   Logged
It is much more powerful to seek Truth for one's self.  Seeing and hearing that others seem to have found it can be a motivation.  With me, I was drawn because of much error and bad judgment on my part. Confronting one's own errors and bad judgment is a very life altering situation.  Confronting the errors and bad judgment of others is usually hypocrisy.


by someone older and wiser than I

PTK

  • friends
  • Senior Member
  • ***
  • Posts: 4,318
Re: stuxnet malware "weapon"
« Reply #5 on: September 22, 2010, 04:31:13 PM »
'swhat I get for not reading Yahoo articles. :laugh:
Report to moderator   Logged
"Only lucky people grow old." - Frederick L.
September 1915 - August 2008

"If you really do have cancer "this time", then this is your own fault. Like the little boy who cried wolf."

AJ Dual

  • friends
  • Senior Member
  • ***
  • Posts: 16,162
  • Shoe Ballistics Inc.
Re: stuxnet malware "weapon"
« Reply #6 on: September 22, 2010, 04:35:58 PM »
So farking cool...  =D

I really hope it was the U.S.

For the record, we actually are the best at this.  [ar15]

http://www.freerepublic.com/focus/f-news/1071087/posts
« Last Edit: September 22, 2010, 04:40:42 PM by AJ Dual »
Report to moderator   Logged
I promise not to duck.

AZRedhawk44

  • friends
  • Senior Member
  • ***
  • Posts: 13,976
Re: stuxnet malware "weapon"
« Reply #7 on: September 22, 2010, 04:36:25 PM »
Sounds like a nice thing to have for going through customs.

"I must inspect your <<data storage device or computing appliance>>." :police:

"Sure, go on ahead." >:D
Report to moderator   Logged
"But whether the Constitution really be one thing, or another, this much is certain - that it has either authorized such a government as we have had, or has been powerless to prevent it. In either case, it is unfit to exist."
--Lysander Spooner

I reject your authoritah!

RevDisk

  • friend
  • Senior Member
  • ***
  • Posts: 12,633
    • RevDisk.net
Re: stuxnet malware "weapon"
« Reply #8 on: September 22, 2010, 04:39:08 PM »
Quote from: PTK on September 22, 2010, 03:35:10 PM
I think Yahoo is, as usual, playing it up. This smacks of absurdity - manual and hydraulic controls aren't connected to the internet - PERIOD.

ROFL

Gods, how I wish that wasn't true. 
Report to moderator   Logged
"Rev, your picture is in my King James Bible, where Paul talks about "inventors of evil."  Yes, I know you'll take that as a compliment."  - Fistful, possibly highest compliment I've ever received.

AJ Dual

  • friends
  • Senior Member
  • ***
  • Posts: 16,162
  • Shoe Ballistics Inc.
Re: stuxnet malware "weapon"
« Reply #9 on: September 22, 2010, 04:41:47 PM »
Also, the last bit of code in hex: DEADF007... whoever wrote it might have a sense of humor.  =)
Report to moderator   Logged
I promise not to duck.

mtnbkr

  • friend
  • Senior Member
  • ***
  • Posts: 15,388
Re: stuxnet malware "weapon"
« Reply #10 on: September 22, 2010, 04:48:12 PM »
I work for an MSSP and have seen attacks against SCADA systems before.  Those tend to be DOS type attacks though.

Chris
Report to moderator   Logged

bedlamite

  • Hold my beer and watch this!
  • friend
  • Senior Member
  • ***
  • Posts: 9,797
  • Ack! PLBTTPHBT!
Re: stuxnet malware "weapon"
« Reply #11 on: September 22, 2010, 04:55:29 PM »
Quote from: AJ Dual on September 22, 2010, 04:35:58 PM
So farking cool...  =D

I really hope it was the U.S.

For the record, we actually are the best at this.  [ar15]

http://www.freerepublic.com/focus/f-news/1071087/posts

No, It wasn't the US. It was Israel. They wrote it and had microbalrog upload it to a shovel porn site that was frequented by Russian nuke techs.
Report to moderator   Logged
A plan is just a list of things that doesn't happen.
Is defenestration possible through the overton window?

AJ Dual

  • friends
  • Senior Member
  • ***
  • Posts: 16,162
  • Shoe Ballistics Inc.
Re: stuxnet malware "weapon"
« Reply #12 on: September 22, 2010, 04:59:00 PM »
 :lol:

And we know it's Jewish code because it waits until the Sabbath is over before attacking?  :angel:
Report to moderator   Logged
I promise not to duck.

lee n. field

  • friend
  • Senior Member
  • ***
  • Posts: 13,587
  • tinpot megalomaniac, Paulbot, hardware goon
Re: stuxnet malware "weapon"
« Reply #13 on: September 22, 2010, 05:27:56 PM »
Quote from: PTK on September 22, 2010, 03:35:10 PM
I think Yahoo is, as usual, playing it up. This smacks of absurdity - manual and hydraulic controls aren't connected to the internet - PERIOD.

Wouldn't count on it.  I recall reading, some years ago, about a machine tool that was also a source of spam.
Report to moderator   Logged
In thy presence is fulness of joy.
At thy right hand pleasures for evermore.

Angel Eyes

  • Lying dog-faced pony soldier
  • friend
  • Senior Member
  • ***
  • Posts: 12,367
  • You're not diggin'
Re: stuxnet malware "weapon"
« Reply #14 on: September 22, 2010, 07:04:56 PM »

According to an article at McAfee, their DAT and engine have been cleaning it since 7/16 this year. 

Report to moderator   Logged
""If you elect me, your taxes are going to be raised, not cut."
                         - master strategist Joe Biden

AJ Dual

  • friends
  • Senior Member
  • ***
  • Posts: 16,162
  • Shoe Ballistics Inc.
Re: stuxnet malware "weapon"
« Reply #15 on: September 22, 2010, 07:56:13 PM »
Quote from: Angel Eyes on September 22, 2010, 07:04:56 PM
According to an article at McAfee, their DAT and engine have been cleaning it since 7/16 this year. 



Except for the versions licensed in Iran.  =D
Report to moderator   Logged
I promise not to duck.

RocketMan

  • Mad Rocket Scientist
  • friend
  • Senior Member
  • ***
  • Posts: 13,631
  • Semper Fidelis
Re: stuxnet malware "weapon"
« Reply #16 on: September 22, 2010, 09:27:39 PM »
It doesn't require that the target system be connected to the web.  All that is necessary is a stupid contractor to connect an infected USB drive while installing an update to the software.  I have seen it happen, and it's not pretty when an entire group of machines across a large, closed national network is affected.
« Last Edit: September 22, 2010, 09:30:53 PM by RocketMan »
Report to moderator   Logged
If there really was intelligent life on other planets, we'd be sending them foreign aid.

Conservatives see George Orwell's "1984" as a cautionary tale.  Progressives view it as a "how to" manual.

My wife often says to me, "You are evil and must be destroyed." She may be right.

Liberals believe one should never let reason, logic and facts get in the way of a good emotional argument.

Antibubba

  • friend
  • Senior Member
  • ***
  • Posts: 3,836
Re: stuxnet malware "weapon"
« Reply #17 on: September 26, 2010, 05:42:31 PM »
Quote
I really hope it was the U.S.

I'm also betting on Israel.

http://news.yahoo.com/s/ap/20100925/ap_on_re_us/un_un_ahmadinejad_29   Interesting timing, wouldn't you say?
Report to moderator   Logged
If life gives you melons, you may be dyslexic.

Perd Hapley

  • Superstar of the Internet
  • friend
  • Senior Member
  • ***
  • Posts: 61,436
  • My prepositions are on/in
Re: stuxnet malware "weapon"
« Reply #18 on: October 13, 2010, 12:32:23 AM »
Microsoft just fixed the problem:

http://www.reuters.com/article/idUSN1220677620101012

Although at the end of the article, they mention that only 3 of the 4 vulnerabilities were addressed.  =|
Report to moderator   Logged
"Doggies are angel babies!" -- my wife

230RN

  • saw it coming.
  • friend
  • Senior Member
  • ***
  • Posts: 18,906
  • ...shall not be allowed.
Re: stuxnet malware "weapon"
« Reply #19 on: October 13, 2010, 04:54:05 AM »
Quote
I'm also betting on Israel.

Do you have to read the code right-to-left?

DEADF007

700DAED
« Last Edit: October 13, 2010, 07:51:26 AM by 230RN »
Report to moderator   Logged
WHATEVER YOUR DEFINITION OF "INFRINGE " IS, YOU SHOULDN'T BE DOING IT.
Pages: [1]
« previous next »