The sophisticated computer worm called Stuxnet, which has been targeting industrial operations around the world, was likely designed to take out Iran’s new Bushehr nuclear reactor, cybersecurity experts say. It’s the first known cyber-super-weapon designed to destroy a real-world target, reports the Christian Science Monitor.

Researchers studying the worm say it was built by an advanced attacker with plentiful resources — possibly a nation-state. Initially, experts thought it was designed for industrial espionage, but upon examining its code, they now think it was built for sabotage.

Ralph Langner, an expert on industrial systems security, has been studying Stuxnet since it was first discovered at a Belarus-based security firm in June. In a blog post last week, he said the worm was most likely assembled by a team of experts with heavy insider knowledge: “This is not some hacker sitting in the basement of his parents’ house. To me, it seems that the resources needed to stage this attack point to a nation state,” he wrote.

He speculates that the target is Iran’s Bushehr reactor, currently under construction. To reach this conclusion, he partly relied upon a UPI picture of the reactor’s operations plant, showing Siemens PLC software.


Stuxnet has targeted Siemens-operated industrial facilities like power plants and chemical factories. It has spread via USB flash drives and through copying itself to new networks protected by weak passwords, according to a news release from Norman ASA, a network security firm.

As PCWorld explains, once Stuxnet identifies a target, it changes a specific piece of Siemens code that monitors critical operations — “things that need a response within 100 milliseconds.” By changing this crucial piece of code, Stuxnet could cause equipment to malfunction, sabotaging a refinery or factory.

So far, no one has ventured to guess which nation might have built Stuxnet. But PCWorld recalled speculation from last summer that Israeli officials were contemplating a cyber attack on Iran.

Langner wrote that whoever built the worm is going to get caught, because cyber-forensics will eventually smoke them out. They must not care about going to jail, he wrote.

If they represent a nation-state, there might be much bigger things to worry about — could Stuxnet represent an opening salvo in a cyber war?
http://www.popsci.com/technology/article/2010-09/advanced-computer-worm-was-designed-attack-iranian-nuclear-reactor-experts-say

►

Russia Bans Selling Missiles, Tanks to IranAnonymous 09/22/10(Wed)14:26 No.254728     File: 128519076775.jpg-(13.35KB, 244x183, image6353627g.jpg) Russian President Dmitry Medvedev issued a decree Wednesday banning all sales of S-300 anti-aircraft missile systems to Iran. Russia signed a 2007 contract to sell the sophisticated systems that could boost Iran's ability to defend against air strikes. Israel and the United States have objected to the deal, and no such missiles have been delivered yet. Medvedev's decree also prohibited exports of tanks, aircraft and sea vessels to Iran. Russia has recently has shown increasing frustration with Iran's policies. It has said United Nations sanctions would prevent it from delivering the S-300s to Iran. The S-300 is capable of shooting down aircraft and missiles at ranges of over 90 miles and at altitudes of about 90,000 feet. In Washington, the White House issued a statement welcoming the executive order signed by Medvedev. "We believe President Medvedev has demonstrated leadership on holding Iran accountable to its international obligations from start to finish," said Mike Hammer, a spokesman for the National Security Council.