´Components of Flame found in Stuxnet virus´ (JERUSALEM POST) By YONI DAYAN, REUTERS Yaakov Lappin contributed to this report 06/11/12)
Source: http://www.jpost.com/MiddleEast/Article.aspx?id=273460
JERUSALEM POST
JERUSALEM POST Articles-Index-Top
Publishers-Index-Top
A leading computer security firm has linked some of the software code
in the powerful Flame virus to the Stuxnet cyber weapon, which is
believed to have been used by the United States and Israel to attack
Iran´s nuclear program.
Eugene Kaspersky, chief executive of Moscow-based Kaspersky Lab,
which uncovered Flame last month, said his researchers have since
found that part of the Flame program code is nearly identical to code
found in a 2009 version of Stuxnet.
The new research could bolster the belief of many security experts
that Stuxnet was part of a massive US-led cyber program that is still
active in the Middle East and perhaps other parts of the world.
Earlier Sunday, the Symantec anti-virus company stated that the Flame
computer virus has been ordered to self destruct.
The origin of the Flame virus has been the subject of wide
speculation. A number of Israeli computer experts told The Jerusalem
Post that the complexity of the Flame bears the hallmarks of a
program engineered by a state.
In an official blog post, Symantec revealed that the virus, which it
termed "Flamer," had been sent an updated directive from its command-
and-control (C&C) servers designed to completely remove itself from
compromised computers.
According to the post, the command would "leave no traces of the
(Flame) infection behind."
"Any client receiving this file would have had all traces of [Flame]
removed," the blog post stated.
Security experts from the Russian Kaspersky Lab announced Flame’s
discovery on May 28, saying it is found in its highest concentration
in Iranian computers. It can also be found in other Middle Eastern
locations, including Israel, the West Bank, Syria and Sudan.
The virus has been active for as long as five years, as part of a
sophisticated cyber warfare campaign, the experts said.
It is the most complex piece of malicious software discovered to
date, according to Kaspersky Lab’s senior security researcher Roel
Schouwenberg.
If the Lab’s analysis is correct, Flame could be the third major
cyber weapon directed against Iran, after the Stuxnet virus that
attacked Iran’s nuclear program in 2010, and its data-stealing cousin
Duqu.
In comments that could be construed as suggesting that Israel is
behind the Flame virus, Vice Premier Moshe Ya´alon said last month
that that "whoever sees the Iranian threat as a serious threat would
be likely to take different steps, including these, in order to hurt
them." Yaakov Lappin contributed to this report (© 1995-2011, The
Jerusalem Post 06/11/12)
Return to Top
MATERIAL REPRODUCED FOR EDUCATIONAL PURPOSES ONLY