Feeds

Rogue US-Israeli cyberwar weapon 'infected Russian nuclear plant'

Even the space station has been infected by malware, claims Kaspersky

Top 5 reasons to deploy VMware with Tegile

Stuxnet - the famous worm widely credited with crippling the Iranian nuclear weapons programme for several years - also infected the internal network of a Russian nuclear plant. Unspecified malware has even reached the International Space Station, according to the boss of Russian anti-virus firm Kaspersky Lab.

Eugene Kaspersky said he heard about the nuclear infection from a "friend of mine" at the unnamed nuclear plant. The unnamed staffer "sent a message their nuclear plant network which was disconnected from the internet ... was badly infected by Stuxnet," Kaspersky said, SC Magazine reports. The malware apparently got into the air-gapped network of the nuke plant on an infected USB stick.

Kaspersky told the anecdote during a recent presentation to the Canberra Press Club during which he spoke about cybercrime, cyber-espionage and attacks against infrastructure systems to members of the mainstream press in Australia.

The charismatic securityware businessman went on to claim that even machines on the International Space Station had been affected by malware, after - unnamed - cyber nasties were carried there on removable media by Russian astronauts.

"Scientists, from time to time, they are coming to space with USBs which are infected. I'm not kidding," he insisted. "I was talking to Russian space guys and they said from time to time there are virus epidemics in the space station."

The most famous Stuxnet infections occurred in Iran's bombproof, deeply buried uranium enrichment facility at Natanz in 2009 and 2010, wrecking high-speed centrifuges after infecting computers connected to SCADA industrial control systems at the plant. The Obama administration last year leaked its role in developing Stuxnet as part of a wider US-Israeli information warfare effort, codenamed Operation Olympic Games, that began under the presidency of George W Bush.

The worm was detected after it escaped onto the internet, and first described by Belarussian firm VirusBlokAda in June 2010.

According to Mr Kaspersky there are only two major infrastructure malware attacks a year worldwide, the only one this year having been targeted against banks and media organisations in South Korea.

The security-biz chieftain's remarks on Stuxnet at the Canberra Press Club are at approximately 26 minutes into the video below. ®

Beginner's guide to SSL certificates

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Home Office: Fancy flogging us some SECRET SPY GEAR?
If you do, tell NOBODY what it's for or how it works
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Syrian Electronic Army in news site 'hack' POP-UP MAYHEM
Gigya redirect exploit blamed for pop-rageous ploy
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Free virtual appliance for wire data analytics
The ExtraHop Discovery Edition is a free virtual appliance will help you to discover the performance of your applications across the network, web, VDI, database, and storage tiers.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
The total economic impact of Druva inSync
Examining the ROI enterprises may realize by implementing inSync, as they look to improve backup and recovery of endpoint data in a cost-effective manner.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Website security in corporate America
Find out how you rank among other IT managers testing your website's vulnerabilities.