Stuxnet Analysis Backs Iran-Israel Connection 307
Trailrunner7 writes "Liam O'Murchu of Symantec, speaking at the Virus Bulletin Conference, provided the first detailed public analysis of the worm's inner workings to an audience of some of the world's top computer virus experts. O'Murchu described a sophisticated and highly targeted virus and demonstrated a proof of concept exploit that showed how the virus could cause machines using infected PLCs to run out of control. Though most of the conversation about Stuxnet is still based on conjecture, O'Murchu said that Symantec's analysis of Stuxnet's code for manipulating PLCs on industrial control systems by Siemens backs up both the speculation that Iran was the intended target and that Israel was the possible source of the virus. O'Murchu noted that researchers had uncovered the reference to an obscure date in the worm's code, May 9, 1979, which, he noted, was the date on which a prominent Iranian Jew, Habib Elghanian, was executed by the new Islamic government shortly after the revolution. Anti-virus experts said O'Murchu's hypothesis about the origins of Stuxnet were plausible, though some continue to wonder how the authors of such a sophisticated piece of malware allowed it to break into the wild and attract attention."
Symantec has also issued a lengthy and detailed dossier on Stuxnet (PDF).
KGB ! (Score:3, Funny)
Re:Wait a minute. (Score:5, Funny)
So are we claiming that development on Stuxnet started on 9/5/1979 in reaction to this execution? (Did Siemans even make industrial control computers in the 70s?) Or are we claiming that the "authors of such a sophisticated piece of malware" decided to plant a trail of clues, like some sort of cartoon villains?
They would have got away with it too, if it weren't for those meddling Symantec engineers.
Re:Wait a minute. (Score:2, Funny)
That's exactly what I would expect a pedophile terrorist puppy-kicker to say.
Re:Wait a minute. (Score:3, Funny)
Careful. What if that's what they want you to think?
Re:It's called circumstantial evidence (Score:5, Funny)
admittedly a bit of a stretch as you note, there are also references to "Myrtus" within a path left in the code. Myrtus, a type of myrtle, is possibly a biblical reference to the Book of Esther (Esther was originally called Hadassah - similar to the Hebrew word for myrtle)
So now we're working off the "this word sounds like this word which is another word for this word" theory?
Lessee. "May" is a synonym with "shall"... which sounds a lot like "challa"... which is a lovely tasty breadstuff usually eaten by... JEWS! AAAUGH! RUN FOR YOUR LIVES!
Of course, that's the point of all this meaningless bullshit. You're looking for obscure connections trying to "prove" your own biases. Nothing more.
Re:Wait a minute. (Score:5, Funny)
You better be careful. Rick Sanchez just said that Jews control all the ISPs and you might have your Internet connecti...{NO CARRIER}
Re:Wait a minute. (Score:5, Funny)
Now that's just being anti-Symantec.
(alt: anti-Siemantic. You pick.)
Re:It's called circumstantial evidence (Score:3, Funny)
there are also references to "Myrtus" within a path left in the code. Myrtus, a type of myrtle,
Which is very close to Yertle the Turtle.
OH
MY
GOD
Dr Seuss authored the virus from beyond the grave!!!!
Re:Wait a minute. (Score:4, Funny)
Re:Really?!? This is front-page quality? (Score:2, Funny)
Talk about "confirmation bias"!
Yes - exactly what I was thinking!
Re:Wait a minute. (Score:4, Funny)
You're starting from your bias and trying to justify your conclusion later. It doesn't work.
Works 100% of the time for me.....which is based on my bias against you being right, thus further supporting my stance.