Stuxnet

#1

Post by bobbiechen » Sun, Jan 05, 2020, 10:30 PM UTC

Stuxnet
en.wikipedia.org

Re: Stuxnet

#2

Post by janpot » Mon, Jan 06, 2020, 8:06 AM UTC

At the time I was working as a SCADA engineer for a company that deployed Siemens PCS7 projects at quite a large scale. This worm was discovered on one of their plants. I remember afterwards it was forbidden to use any USB drive whatsoever. These systems are typically physically isolated from the internet. So every night I had to write my work to a CD to be able to get it on my laptop so I could back it up.

Re: Stuxnet

#3

Post by dekalbcountyman » Mon, Jan 06, 2020, 9:13 AM UTC

Good Times

I remember the media circus surrounding this shit. Eventually, it was found to be MOSSAD/CIA - this whole period during the Israel-USA vs Iran cold war was interesting.

Stuxnet was important because it was the first State vs State campaign in cyber warfare, but Stuxnet was a media distraction while Israel conducted other tangible sabotage..

https://en.wikipedia.org/wiki/Assassination_of_Iranian_nucle...

Pretty sure OP was having the same nostalgia I was having

Re: Stuxnet

#4

Post by comprev » Mon, Jan 06, 2020, 9:51 AM UTC

janpot wrote: post #2

At the time I was working as a SCADA engineer for a company that deployed Siemens PCS7 projects at quite a large scale. This worm was discovered on one of their plants. I remember afterwards it was forbidden to use any USB drive whatsoever. These systems are typically physically isolated from the internet. So every night I had to write my work to a CD to be able to get it on my laptop so I could back it up.

I was also working for an engineering company who worked with Siemens kit as a sysadmin. Our engineers found the whole thing fascinating. Something serious had happened in their "world" of PLCs

Re: Stuxnet

#5

Post by jonplackett » Mon, Jan 06, 2020, 1:54 PM UTC

How did all the information leak about this?

Was it just from people reverse engineering it, or were there leaks from intelligence agencies?

Re: Stuxnet

#6

Post by roddie » Mon, Jan 06, 2020, 2:04 PM UTC

jonplackett wrote: post #5

How did all the information leak about this? Was it just from people reverse engineering it, or were there leaks from intelligence agencies?

There's an incredible book by Kim Zetter called Countdown to Zero Day which is indispensable for anyone interested in Stuxnet: https://www.goodreads.com/book/show/18465875-countdown-to-ze...

Re: Stuxnet

#7

Post by nodesocket » Mon, Jan 06, 2020, 4:51 PM UTC

roddie wrote: post #6

jonplackett wrote: post #5

How did all the information leak about this? Was it just from people reverse engineering it, or were there leaks from intelligence agencies?

There's an incredible book by Kim Zetter called Countdown to Zero Day which is indispensable for anyone interested in Stuxnet: https://www.goodreads.com/book/show/18465875-countdown-to-ze...

There is also a great documentary on Hulu called Zero Days[1] that is fantastic about Stuxnet. Highly recommended.

[1] https://en.m.wikipedia.org/wiki/Zero_Days

Re: Stuxnet

#8

Post by swatkat » Mon, Jan 06, 2020, 7:47 PM UTC

jonplackett wrote: post #5

How did all the information leak about this? Was it just from people reverse engineering it, or were there leaks from intelligence agencies?

Stuxnet was discovered by Belarusian antivirus expert Sergey Ulasen, who was working for Belarusian antivirus company VirusBlokAda. Later, he moved to Kaspersky. This is how it was discovered:

"It all started when the technical support guys informed me about a rather unusual case: a customer in Iran reported arbitrary BSODs and computer reboots. They forwarded me the help-request together with info about their preliminary scanning reports."

Read the amazing interview here: https://eugene.kaspersky.com/2011/11/02/the-man-who-found-st...