Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I hate to burst your bubble but as someone who's gone through stuxnet with a fine toothcomb more than once, there's nothing (as expected with decently written malware) that is directly attributable to a single country or intelligence service.

Stuxnet has been heavily sensationalised by the media, who like the idea of intrigue more than the reality that this is a (predominantly) untargeted (it hit more targets in India than Iran when I was looking at it) but highly sophisticated piece of malware, but nothing that couldn't have been written by a decent pen test team in a few months.

Is it a CNE (Computer Network Exploitation) act? Possibly, and the presence of Scada exploits indicates the possibility. But bear in mind that there are CANVAS (http://www.immunitysec.com/) packs that have 0day SCADA exploits in them and they aren't written buy governments.



directly attributable to a single country or intelligence service

Except that I didn't say that Stuxnet was attributable only to one country, just that it was effective.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: