Update: Iran says it was targeted with second worm, 'Stars'
Few details available about targeted worm attack
IDG News Service - The general responsible for investigating the Stuxnet attack on Iran's nuclear program says the country was also hit by a second targeted attack, called Stars.
Few details on the reported attack are available, except that it appears to have been directed at specific computer systems within the country. "Certain characteristics about the Stars worm have been identified, including that it is compatible with the (targeted) system," said Brigadier General Gholam-Reza Jalali, director of Iran's Passive Defense Organization, in a report Monday by the country's Mehr News Agency.
Iran has been attempting to shore up its cyberdefenses since it was hit by the Stuxnet worm last year. Stuxnet is widely believed to have been written in order to sabotage the country's Natanz nuclear facility. Thought to be one of the most sophisticated cyber-attacks ever written, Stuxnet seeks out and sabotages specific industrial systems by making them operate in an unsafe way.
Just last week Jalali blamed Siemens, the company whose industrial systems were targeted by Stuxnet, saying that the German company should "explain why and how it provided the enemies with the information about the codes of the SCADA software and prepared the ground for a cyber attack against us."
Siemens responded to that accusation Monday.
"Siemens was not involved in the creation of Stuxnet. The accusation is unfounded," Siemens spokesman Michael Krampe said via e-mail. He added that Iran has not brought any legal action against Siemens.
Iranian computer experts are still studying the Stars malware, Mehr reported, and Western cyber-experts say they're not sure whether Iran has identified a new attack. "We don't know if Iran officials have just found some ordinary Windows worm and announced it to be a cyber war attack," wrote F-Secure researcher Mikko Hypponen in a Monday blog post.
"This one sounds more like cyber espionage than cyber sabotage," he said in an instant message interview. "We see cyber espionage all the time. We've only seen one attack like Stuxnet, ever."
- The NSA blame game: Singling out RSA diverts attention from others
- Jury still out on FISA court
- Suspected China-based hackers 'Comment Crew' rises again
- Chinese hackers master the art of lying in wait
- Spy court OK'd all U.S. wiretap requests it received in 2012
- Groups denounce FBI plan to require Internet backdoors for wiretaps
- South Korea cyberattacks hold lessons for U.S.
- U.S. military networks not prepared for cyberthreats, report warns
- Return of CISPA: Cybersecurity boon or privacy threat?
- New report says cyberspying group linked to China's army
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The Threat Landscape Hardly a day goes by without the discovery of a new cyberthreat somewhere in the world! But how do you keep up with...
- Security for Virtualization In the rush to implement virtualization, security has become second. So while the business benefits are clear, the risks are less well documented...
- HP HAVEn: See the big picture in Big Data HP HAVEn is the industry's first comprehensive, scalable, open, and secure platform for Big Data. Enterprises are drowning in a sea of data...
- What Datapipe customers need to know about the new PCI DSS 3.0 compliance standard This handy quick reference outlines what PCI DSS 3.0 is, who needs to be compliant and how Alert Logic solutions address the new...
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,... All Malware and Vulnerabilities White Papers | Webcasts