Does Anyone Know How Serious The Stuxnet Cyber-Weapon Is?

Joseph C.

🚴‍♂️ Mega poster
Joined
Feb 3, 2011
Messages
1,798
Location
Ireland
Reading The Sunday Times today and there is a very disturbing article about the Stuxnet virus. I think LI-ghtcycle mentioned it in passing.

Considering this is behind the Paywall - here is a brief surmise.

This software is supposedly created by Israel and the U.S. with possible help from Germany and it targets heavily secure industrial facilities. It was created to stop Iran's Nuclear Programme by hunting out for specific models of Semiens programmable logic controllers (PLCs) via a 'zero day' exploit. 15,000 lines of code run parallel or on top of the existing controller code without destroying the original.

Once a month they would attack in short, either 15 or 50 minute bursts, by either decreasing or increasing the speed of the motors controlling the centrifuge rotors at the Natanz nuclear facility in Iran. Even if Iran was to be attacked there was also a secondary advantage that they could watch surveillance cameras installed by the International Atomic Energy Agency. So in effect they could monitor exactly what the effects of Stuxnet - which were 1,000 busted centrifuges.

The sophistication of the virus, and the false signals it would send to the computer terminals, meant it couldn't be traced until the centrifuges were destroyed. Plus they had the complete layout of the facility, the programming controller code.

Ralph Langer, who is campaigning governments about the effects of this virus, reckons 'the attackers must have had the opportunity to check it out in a test environment. They must have had a mock-up plant.'

It seems George Bush had one final 'present' for the world when he apparently ordered this operation. Iran now have stepped up their efforts to have nuclear weapons and the Israeli zealots are getting even nuttier than normal, launching attacks on Iran. This will end badly.

In the meantime - the Stuxnet code - the most sophisticated virus ever developed, allegedly created by a multi-nation-backed team, is now freely available to download by anyone. The article goes on to state that even lay people can launch this virus as some people have developed a point-and-click module-based interface for it.

The piece ends by speculating the potential list of targets and industrial complexes that can be hacked. These include chemical plants, water-treatment plants and obviously nuclear power stations. I assume you could also add non-nuclear power stations, data-centres etc.

Apparently, we will have some very interesting times ahead if even a small portion of these attacks occur. :mrgreen:
 
We deserve what comes to us if we have lead a path from the internet to the most important industrial controls we have.

This reminds me of y2k; the solution to the problem was mind blowingly simple, but there was mass hysteria nonetheless. I was in my late teens and quit my first job at a computer repair shop because the boss was trying to get me to sell / install y2k fix ISA/PCI cards.

..and what happened on 01/01/2000? absolutely nothing.

Don't you fear. There are extremely easy solutions to this problem and there are greater things to worry about. Like the federal reserve handing 7 trillion dollars to the banks that failed, and sending the money printing machine into overdrive.
 
Anyone who connects a control system to public internet does kind of get what they deserve. It should be an isolated system - and only accessible by corporate VPN, heavily secured (using vasco one-time token gernerators etc - the infrastructure is there to support it, its not rocket science).

PLC is something that is pretty much forgotton in terms of patches and upgrades - maybe this will change that perception.
 
wineboyrider said:
If Israel (and thus the US and UK for that matter) launch an attack on Iran it will be WWIII guaranteed. :( :( :( :( Oil would probably go to $300.00 a barrel.

Just the thing we need to spur innovation in alternative energy :mrgreen:
It takes a super crisis for America to respond to things. History has proven it. I'd love to see $300 a barrel fuel. We can then go back to local farming, a non-globalized economy, and i think there will be a sudden boom of interest in electric bicycles, what do you think... :lol:
 
neptronix said:
wineboyrider said:
If Israel (and thus the US and UK for that matter) launch an attack on Iran it will be WWIII guaranteed. :( :( :( :( Oil would probably go to $300.00 a barrel.

Just the thing we need to spur innovation in alternative energy :mrgreen:
It takes a super crisis for America to respond to things. History has proven it. I'd love to see $300 a barrel fuel. We can then go back to local farming, a non-globalized economy, and i think there will be a sudden boom of interest in electric bicycles, what do you think... :lol:
Necessity is the mother of invention Nep. But, if we get $300 barrel oil many people will die and many more will starve. We don't need manufactured invention. Glad to see you comprehend our money printing problem though. :lol: :lol: :lol: :lol:
END THE FEDERAL RESERVE. It's the only way out.
 
Stuxnet didn't require internet connection to get into the Iran control systems. There are other vectors in. Always.

Y2K was averted through a lot of hard work. A lot of systems had to be fixed beforehand, and were. A lot of effort was expended. If nothing had been done you would have noticed.

Control systems are not always as isolated from the internet as you would think, or hope. Not everyone gets the danger. Even the folks that do have a hard job with limited support and funding to stay ahead. And some companies like Microsoft keep adding bugs and features that can be remotely attacked. Layers of complexity do not equal security.

Good encryption is hard and a lot of folks think they know how to do it but are wrong.

The latest is that HP printers can be firmware updated by anyone, zero security. The new firmware can manipulate the fuser, or be used to snoop for local information, like all the documents printed that are still stored in the printer. The fuser can damage the printer, perhaps even start a fire. There are quite a few HP printers out there just waiting for new firmware. HP doesn't get security at all in printers. They aren't the only ones.

New PLC systems are patched a lot. Unfortunately they have more bugs than the old simple ones did. So they need patching. And they need programming, and user interfaces, and those are generally Microsoft based PCs that can bring in unwanted stuff.

I wouldn't keep HP stock much longer. It may take a tumble here anytime.

It is pretty concerning.
 
bigmoose said:
Get rid of the Federal Reserve, or get rid of the Federal Reserve AND Fiat Currency?
Both actually a central bank has no part of a free market economy. Europe is learning that the hard way. Plus as American's it is unconstitutional.
The Federal Reserve is a privately owned banking cartel no more Federal than Federal Express. :D :D :D :D :D :D
 
wineboyrider said:
neptronix said:
wineboyrider said:
If Israel (and thus the US and UK for that matter) launch an attack on Iran it will be WWIII guaranteed. :( :( :( :( Oil would probably go to $300.00 a barrel.

Just the thing we need to spur innovation in alternative energy :mrgreen:
It takes a super crisis for America to respond to things. History has proven it. I'd love to see $300 a barrel fuel. We can then go back to local farming, a non-globalized economy, and i think there will be a sudden boom of interest in electric bicycles, what do you think... :lol:
Necessity is the mother of invention Nep. But, if we get $300 barrel oil many people will die and many more will starve. We don't need manufactured invention. Glad to see you comprehend our money printing problem though. :lol: :lol: :lol: :lol:
END THE FEDERAL RESERVE. It's the only way out.

Sure, there would be a massive disruption! This might be a novel concept to you, but we can grow food, get around, and live without oil. Before the 1900's, people were all riding horses or bicycles to get around. The first cars were glorified 4 wheel bikes. They also lived in moderate climates where you didn't need to run your heat/AC half the year... because... they didn't have AC and their heat source was not all that fantastic either.

Cuba lost their oil welfare from their communist comrades about a decade ago and starved for a few years until the figured out how to do organic farming again without oil-derived pesticides/fertilizer and cheap energy. They got back on their bicycles and parked their cars and worked it out.

We've got a country wide obesity problem, a low quality food supply, and a massive overdependence on oil. Investment into alternative energy peaked when gas was 5 bucks a gallon and now it's back to a low. We could use something to motivate us to curb our use. Bring it on i say.
 
neptronix said:
Sure, there would be a massive disruption! This might be a novel concept to you, but we can grow food, get around, and live without oil. Before the 1900's, people were all riding horses or bicycles to get around. The first cars were glorified 4 wheel bikes. They also lived in moderate climates where you didn't need to run your heat/AC half the year... because... they didn't have AC and their heat source was not all that fantastic either.

Cuba lost their oil welfare from their communist comrades about a decade ago and starved for a few years until the figured out how to do organic farming again without oil-derived pesticides/fertilizer and cheap energy. They got back on their bicycles and parked their cars and worked it out.

We've got a country wide obesity problem, a low quality food supply, and a massive overdependence on oil. Investment into alternative energy peaked when gas was 5 bucks a gallon and now it's back to a low. We could use something to motivate us to our use. Bring it on i say.

Perhaps the U.S. and much of Europe could do without oil but parts of Asia, Africa and South America cannot and billions would starve without fertiliser. Luckily they started engineering plants or a billion or two people would already be dead.

You do realise that Cuba imports 80 per cent of its food? What type of fertiliser do you think the countries that it imports the food from uses?

http://articles.cnn.com/2008-04-16/world/cuba.farming_1_food-production-agriculture-sector-import?_s=PM:WORLD

Cuba has rich resources compared to a continent like Africa which has over one billion people on just 30 million square kilometres, one-third of which is desert. And their problems will grow as corrupt governments are selling off their land to countries such as China, the U.S., Japan and the E.U. nations. Even famine-hit countries are doing this while their citizens starve to death.

Cuba had to be bailed out by the U.S. in 1993 when it ran out of food. Although if they spent less resources growing cancer plantations and more on food that may not have happened. Therefore, I would imagine that the country could improve its production. But could it make up 80 per cent? I doubt it.

Other places, as of yet, still need oil-based fertilisers there are just too many people on the planet.

Burning oil in cars and transportation is a completely different story.

Obesity is a multi-factor problem. Poor diet, too much sugar, too little fat, too much processed fat, cereal grain products, bacterial infections such as unchecked gastroenteritis and other medical problems, plastic by-products such as those found in Teflon, sedentary lifestyles, alcoholism and poor school education (things like classing pizza as a vegetable etc) all contribute amongst others.

Then there is the fact that people don't realise that there are three distinct body types and some people are naturally endomorphs and therefore are not obese.
 
Let's look at it the opposite way. Without oil, places you mentioned may not be able to survive. Before oil, many areas were not populated and the world population was much smaller. Oil allowed the world population to explode. Oil is a finite resource and most of the world's population is basically on life support because of it though. That is dangerous.

At the same time, the world has been designed as if the supply of oil is endless. And we continue to do progressively more desperate and environmentally destructive things to keep those fossil fuels coming.

Either way you are going to have decades of starvation and suffering until the unsustainable areas totally shrivel up.
Conserving oil and finding alternatives is a great way of prolonging that from happening. Right now we in North America are the biggest consumer of oil per capita worldwide. The low hanging fruit is here waiting to be picked and it will take a crisis for us to even touch it.. that's why i welcome an oil price shock, to help us get our priorities in line, despite the negative effects.

As for Cuba, they have been cutting their imports drastically and allowing farming to be privatized. I do believe that the nation is sort of letting the communist ideals take a back seat, but it's been a slow process.
http://www.reuters.com/article/2010/01/03/cuba-food-idUSN0322348420100103

President Raul Castro, who took over for his older brother Fidel Castro in February 2008, has increased what the state pays for crops, decentralized agricultural decision-making and distribution and leased 50 percent of vacant state lands to 100,000 individuals and private and state cooperatives farms.
 
Thanks for your post, Alan B it was very informative and eye-opening.

Yes, I agree with you Neptronix but a lot of people, and let's face it they won't be from the developed nations, will have to endure torrid pain. It's not something I would celebrate.

The ending of oil fuel in cars, buses and household heating though is certainly something that should be lauded.
 
Actually, I don't disagree with you at all Neptronix I want to see the US farm our own food again. That's why I grow organic grapes! lol. I just don't want to see people die over it.
 
wow...remember when, from about the late 70's and all through the 80's, half of the privately owned farms in the midwest got foreclosed by banks? Nearly all of that property went to foreign investors and are still held by them. We do not really even own our own breadbasket anymore.
Add to that, the bank-required "deals", where, in order for farmers to get their anual, short-term loans...they must buy the package deals of fertilizer, genetically engineered seeds (which cannot simply be replanted by seeds) and other crucial supplies. Pesticides are another topic of great concern.
Now, the hydrofracturing of the earth in order to get to the oil, lets oil into our aquaferd, which is alarmingly low anyway.
We are doing a great job of murdering ourselves, slow-motion.
Our backyards are the key to our survival. Compost....live where you can dig a well if needbe. Get a good filtration system. Learn to garden and have at least a few chickens or something for poop. Soon, water will be more valuable than oil.
Magnetic energy will eventually save us, if we don't kill ourselves off before it's too late....but we've had the technologies to save ourselves, except the illuminati are deeply infiltrated into all the decision making processes that govern our fate. We are really setting ourselves up for another civil war and anarchy and local standoffs with the big dudes.
 
dannyboyohyeah said:
wow...remember when, from about the late 70's and all through the 80's, half of the privately owned farms in the midwest got foreclosed by banks? Nearly all of that property went to foreign investors and are still held by them. We do not really even own our own breadbasket anymore.
Add to that, the bank-required "deals", where, in order for farmers to get their anual, short-term loans...they must buy the package deals of fertilizer, genetically engineered seeds (which cannot simply be replanted by seeds) and other crucial supplies. Pesticides are another topic of great concern.
Now, the hydrofracturing of the earth in order to get to the oil, lets oil into our aquaferd, which is alarmingly low anyway.
We are doing a great job of murdering ourselves, slow-motion.
Our backyards are the key to our survival. Compost....live where you can dig a well if needbe. Get a good filtration system. Learn to garden and have at least a few chickens or something for poop. Soon, water will be more valuable than oil.
Magnetic energy will eventually save us, if we don't kill ourselves off before it's too late....but we've had the technologies to save ourselves, except the illuminati are deeply infiltrated into all the decision making processes that govern our fate. We are really setting ourselves up for another civil war and anarchy and local standoffs with the big dudes.

Have you met Jim Corr by any chance dannyboyohyeah? I was in agreement with you until I came to the final paragraph.
 
For thoses that wanna read the real version in 3 parts with alot of technical details.

http://blogs.technet.com/b/markrussinovich/archive/2011/03/30/3416253.aspx

http://blogs.technet.com/b/markrussinovich/archive/2011/04/20/3422035.aspx

http://blogs.technet.com/b/markrussinovich/archive/2011/05/10/3422212.aspx

regards
 
heathyoung said:
Anyone who connects a control system to public internet does kind of get what they deserve. It should be an isolated system - and only accessible by corporate VPN, heavily secured (using vasco one-time token gernerators etc - the infrastructure is there to support it, its not rocket science).

Stuxnet carries a targeted payload, so it does not need a connection to the internet. It is serious bad news, rumored to be created by US military, and demonstrates what is possible with the wrong motivation. It has a bazillion routes of infection including things thought impossible, like Print Queues, PDF documents, and the ever-popular 'USB flash drive in the parking lot.' When it hit, it was a 'Day-One' Virus, so no scanner in the world would have detected it.

It is rumored to have been deployed against an Iranian Uranium enrichment plant. That payload was coded for a specific device, and once it reached that controller (which nobody thought was infectable), it spun up rotating drums beyond tolerances, to failure, while generating data back to the operators reporting normal operation (which is a challange in itself).

When technology like this ends up in the wrong hands, every SCADA system in the world will be at risk. What is the worst industrial accident you can imagine? It gives me nightmares.

-JD
 
I call BS on all this "rumour" and "hyper tech" speculation.
Most of the supposedly smart "covert" things the military and other agencies attempt to do, usually end up as an embarrassing "cluster f*ck" .
I suggest its far more likely that someone has used a industrial screw up in Iran as an opportunity to claim some credibility for a mythical "operation" and to justify the enormous budget they burn on paranoid daydreams !
 
Hillhater said:
I call BS on all this "rumour" and "hyper tech" speculation.
Most of the supposedly smart "covert" things the military and other agencies attempt to do, usually end up as an embarrassing "cluster f*ck" .
I suggest its far more likely that someone has used a industrial screw up in Iran as an opportunity to claim some credibility for a mythical "operation" and to justify the enormous budget they burn on paranoid daydreams !

OK. Do your homework on this one. Then check back and let us know if you still believe that. The code is out there, you can review it yourself if you wish.

The govt messes up some things pretty well, but the techies make some amazing tools. The two are somewhat unrelated.
 
Ok, I ll post the links again for the techie savy

http://blogs.technet.com/b/markrussinovich/archive/2011/03/30/3416253.aspx

http://blogs.technet.com/b/markrussinovich/archive/2011/04/20/3422035.aspx

http://blogs.technet.com/b/markrussinovich/archive/2011/05/10/3422212.aspx

regards
 
Here is Robert Langner who discovered the virus's purpose and what it did.

[youtube]CS01Hmjv1pQ[/youtube]

Edit: The wiki article.

http://en.wikipedia.org/wiki/Stuxnet
 
http://www.wired.com/threatlevel/2011/07/how-digital-detectives-deciphered-stuxnet/all/1
 
Back
Top