The Evolution of Malware: From Viruses to Stuxnet

In the latest edition of the Lab Matters video series, Ryan Naraine talks with Eugene Kaspersky about the state of the malicious Web and the evolution of malware from viruses to worms to botnets to Stuxnet and beyond...

Understanding the Dangers of Stuxnet in Industrial Control Systems

Stuxnet is a sophisticated virus specifically designed to attack supervisory control and data acquisition SCADA systems manufactured by Siemens, a German industrial giant. These systems are commonly used to manage water supplies, power plants, and other industrial facilities, making the worm...

Stuxnet Virus Could Threaten U.S. Infrastructure, Warns DHS Official

The computer virus Stuxnet, which some experts believe was created specifically to target Iran's nuclear facilities, could also threaten U.S. infrastructure, according to a senior Department of Homeland Security official. "That virus focused on specific software implementations, and those softwar...

TDL4 Rootkit Now Using Stuxnet Bug

The TDL4 rootkit, which reared its head last month as the latest evolution of the venerable TDSS malware family, is now using one of the Windows bugs that was first seen in use by Stuxnet. The latest modification to TDL4 enables the rootkit to use the unpatched Windows Task Scheduler vulnerabilit...

Stuxnet Infected Host Detection

Binary data 5738.prm...

Stuxnet Traffic Detection

Binary data 5721.prm...

U.S. Adopts Military Tactics for Rising Cyberwar Threats

The increasing threats of cyberwar are keeping U.S. officials busy alongside ongoing wars on terror and drugs. Recent incidents highlight the rising cyberwarfare concerns: Google reported espionage attacks originating from China, mysterious Internet traffic activities related to China, the Stuxne...

Stuxnet Code Now Available to Hackers, Posing Major Threat to Infrastructure

According to a report from Sky News, the Stuxnet worm has already been traded on the black market. The report does not specify whether this refers to the source code or binary samples. British security specialists now fear that terrorists could use the worm to attack critical infrastructure. The...

STUXNET Scanner to Identify Stuxnet Infected Machines !

TrendLabs has created a STUXNET Scanner Tool to help administrators with clues to determine which computers in their networks are still infected by STUXNET. This tool helps administrators identify infected machines within their own networks even if STUXNET is not communicating as STUXNET installs...

Exploit Code For Stuxnet Windows Task Scheduler Bug Posted

Exploit code is now publicly available for one of the four previously undisclosed Windows vulnerabilities that the Stuxnet worm exploits. The availability of exploit code for the Windows Task Scheduler bug used by Stuxnet makes the bug somewhat more dangerous, as there is currently no patch...

Stuxnet Worm Detection (uncredentialed check)

Binary data stuxnetdetectnocreds.nbin...

Symantec: Stuxnet Likely Targeted Uranium Enrichment Systems

Symantec’s not saying that the Stuxnet worm was a state-sponsored creation designed to take out the centrifuges that power Iran’s controversial uranium enrichment program. The company’s just saying that if someone can come up with another explanation that pieces together the latest analysis of th...

zScaler: Resurgent Lethic using Stuxnet Tricks

Newly detected versions of the Lethic botnet are digitally signed using stolen credentials similar to those used by the Stuxnet worm, according to a blog post from Web security firm zScaler. In a blog post Wednesday, zScaler Senior Security Researcher Mike Geide said the company had intercepted n...

Search Engine Finds Vulnerable SCADA Systems

UPDATED: ICS-CERT, the emergency response team for industrial control systems, has warned companies that run SCADA Supervisory Control and Data Acquisition software that the systems running it may be easily discovered using a free Web based search engine dubbed Shodan. The warning came in the for...

Expert Advises Caution on SCADA Security Hysteria

TORONTO–The months-long hysteria over Stuxnet and its hyper-sophistication and passel of unknown vulnerabilities has had the effect of creating a secondary wave of panic about the vulnerability of industrial control and SCADA systems. But the concern about spontaneous utility outages and...

Report: Technical Glitch Takes ICMBs Offline

A report in The Atlantic claims that a technical glitch at Warren Air Force Base in Wyoming took 50 nuclear intercontinental ballistic missiles ICBMs offline for around 45 minutes on Saturday – a serious breach of national security. The causes of the disruption are still in dispute, but the loss ...

SCADA Vendors Still Need Security Wake Up Call

Companies that make supervisory control and data acquisition SCADA and industrial control software are still dangerously lax when it comes to application security and vulnerable to attack, according to a researcher from security firm Tenable Inc. who warned that the use of coded administrative...

Microsoft Windows 32-bit Platforms Unspecified vulnerabilities

This host is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbmswindowsstuxnetunspecifiedvuln.nasl 7172 2017-09-18 11:07:34Z cfischer $ Microsoft Windows 32-bit Platforms Unspecified vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Network...

Microsoft Windows 32-bit Platforms Unspecified vulnerabilities

This host is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...