Subscribe free to our newsletters via your
. 24/7 Space News .




CYBER WARS
Flame virus linked to Stuxnet: researchers
by Staff Writers
Washington (AFP) June 11, 2012


The Flame computer virus which has been raging in the Middle East has strong links to Stuxnet, a malware program widely believed to have been developed by the United States or Israel, a security firm said Monday.

Kaspersky, the Russian computer security firm credited with discovering Flame last month, said its research shows the two programs share certain portions of code, suggesting some ties between two separate groups of programmers.

Kaspersky researcher Alexander Gostev said in a blog post that a first examination made it appear the two programs were unrelated.

"But it turns out we were wrong," he wrote. "Our research unearthed some previously unknown facts that completely transform the current view of how Stuxnet was created and its link with Flame."

Gostev said Flame, even though it was discovered just recently, appears to predate Stuxnet, which was created in 2009.

"By the time Stuxnet was created (in January-June 2009), the Flame platform was already in existence (we currently date its creation to no later than summer 2008) and already had modular structure," he said.

"The Stuxnet code of 2009 used a module built on the Flame platform, probably created specifically to operate as part of Stuxnet."

This, he said, points to the existence of "two independent developer teams... (each) developing its own platform since 2007-2008 at the latest."

Kaspersky, one of the world's biggest producers of anti-virus software, said the Flame virus was "about 20 times larger than Stuxnet," the worm which was discovered in June 2010 and used against the Iranian nuclear program.

High concentrations of computers compromised by Flame were also found in Lebanon, the West Bank and Hungary. Additional infections have been reported in Austria, Russia, Hong Kong and the United Arab Emirates.

Compromised computers included many being used from home connections, according to security researchers who were looking into whether reports of infections in some places resulted from workers using laptops while traveling.

Stuxnet was designed to attack computer control systems made by German industrial giant Siemens and commonly used to manage water supplies, oil rigs, power plants and other critical infrastructure.

Most Stuxnet infections have been discovered in Iran, giving rise to speculation it was intended to sabotage nuclear facilities there. The worm was crafted to recognize the system it was to attack.

Some reports say US and Israeli intelligence services collaborated to develop the computer worm to sabotage Iran's efforts to make a nuclear bomb.

Johannes Ullrich, a researcher at the Washington-based SANS Technology Institute, said the relationship between the two viruses remains unclear.

"Flame did initially appear very different, and I still think it wasn't written by the same group or individual that wrote Stuxnet," Ullrich told AFP.

"However, this doesn't mean that the two groups didn't coordinate or share code with each other. I do think this may have been the case with Stuxnet and Flame... the code could have been written by two different contractors who worked for the same government and as a result had access to each other's resources."

.


Related Links
Cyberwar - Internet Security News - Systems and Policy Issues






Comment on this article via your Facebook, Yahoo, AOL, Hotmail login.

Share this article via these popular social media networks
del.icio.usdel.icio.us DiggDigg RedditReddit GoogleGoogle








CYBER WARS
Flame spy virus gets order to vanish: experts
San Francisco (AFP) June 10, 2012
US computer security researchers said Sunday that the Flame computer virus that smoldered undetected for years in Middle Eastern energy facilities has gotten orders to vanish, leaving no trace. Anti-virus company Symantec said in a blog post that late last week, some Flame "command-and-control servers sent an updated command to several compromised computers." "This command was designed t ... read more


CYBER WARS
UA Lunar-Mining Team Wins National Contest

NASA Lunar Spacecraft Complete Prime Mission Ahead of Schedule

NASA Offers Guidelines To Protect Historic Sites On The Moon

Neil Armstrong gives rare interview - to accountant

CYBER WARS
NASA's Mars rover zeroes in on August landing

Russia May Join Mars Orbiter Project in Nov. - ESA

Robotic Arm Gets to Work on Veins of Gypsum

Odyssey Orbiter Puts Itself into Standby Safe Mode

CYBER WARS
US scientists host 'bake sale for NASA'

XCOR Appoints Space Expedition Corp As General Sales Agent For Space Tourism Flights

European Union launches latest space regulation efforts

CU-Boulder students to help NASA develop plant food production for deep space

CYBER WARS
Two Women For Tiangong

Shenzhou 9 Ready For Manned Mission To Tiangong-1

China to launch manned spacecraft this month

What will China's Taikonauts do aboard Tiangong 1?

CYBER WARS
Strange Geometry - Yes, It's All About the Math

Capillarity in Space - Then and Now, 1962-2012

Dragon on board

SpaceX Launches Falcon 9 Dragon on Historic Mission

CYBER WARS
NuSTAR Arrives at Island Launch Site

Another Ariane 5 begins its initial build-up at the Spaceport

Boeing Receives DARPA Airborne Satellite Launch Study Contract

Sea Launch Delivers the Intelsat 19 Spacecraft into Orbit

CYBER WARS
Tiny Planet-Finding Mirrors Borrow from Webb Telescope Playbook

Astronomers Probe 'Evaporating' Planet Around Nearby Star with Hobby-Eberly Telescope

Venus transit may boost hunt for other worlds

NSO To Use Venus Transit To Fine-Tune Search For Other Worlds

CYBER WARS
Lawrence Livermore research identifies precise measurement of radiation damage

Hologram developers raise real cash for virtual stars

Smooth moves: how space animates Hollywood

Skeleton key




The content herein, unless otherwise known to be public domain, are Copyright 1995-2014 - Space Media Network. AFP, UPI and IANS news wire stories are copyright Agence France-Presse, United Press International and Indo-Asia News Service. ESA Portal Reports are copyright European Space Agency. All NASA sourced material is public domain. Additional copyrights may apply in whole or part to other bona fide parties. Advertising does not imply endorsement,agreement or approval of any opinions, statements or information provided by Space Media Network on any Web page published or hosted by Space Media Network. Privacy Statement