Feeds

Iran: 'Nuke spies nabbed, but not for Stuxnet'

Not infected USB-wielding infidels, then?

Internet Security Threat Report 2014

Iranian leaders have backtracked on earlier claims that they had arrested unnamed nuclear spies over the spread of the infamous Stuxnet worm in the country.

Intelligence minister Heidar Moslehi repeated the standard line that infections by the Stuxnet worm had been contained. Then he said that the arrest of so-called "nuclear spies" last month was nothing to do with the malware, a statement at odds with earlier ministerial pronouncements.

The highly sophisticated Stuxnet worm targets industrial plant control systems from Siemens and is capable of reprogramming or even sabotaging infected systems. Iranian officials had previously admitted that the worm had infected PCs at its highly controversial Bushehr nuclear plant - but maintain that this was nothing to do with months-long delays in bringing its reactors online.

The malware infected more computers in Indonesia and India than Iran, but that hasn't stopped Iran pointing the finger of blame for the creation of the worm towards its arch-enemy, Israel.

Independent security experts reckon Stuxnet, which uses no less than four zero-day attacks, would have taken a four-man team with access to power plant control systems for testing purposes at least half a year to develop. That suggests nation-state involvement - but anything beyond that is pure speculation. One popular theory posits that the worm was developed in Israel and introduced by Russian sub-contractors working at Bushehr, perhaps via an infected USB stick. However, there's no evidence to either prove or disprove this theory.

The main effect of the worm has come in substantiating arguments that Western countries need to do more to invest in the cyber-defence of critical infrastructure systems, an area allocated £500 million in the UK's defence spending review, despite cuts in spending in the wider economy. Naturally countries such as Britain are also developing offensive cyber-weapons too, but nobody likes to talk about that. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Home Office: Fancy flogging us some SECRET SPY GEAR?
If you do, tell NOBODY what it's for or how it works
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Syrian Electronic Army in news site 'hack' POP-UP MAYHEM
Gigya redirect exploit blamed for pop-rageous ploy
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

10 ways wire data helps conquer IT complexity
IT teams can automatically detect problems across the IT environment, spot data theft, select unique pieces of transaction payloads to send to a data source, and more.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
The total economic impact of Druva inSync
Examining the ROI enterprises may realize by implementing inSync, as they look to improve backup and recovery of endpoint data in a cost-effective manner.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.