• Home
• Products & Solutions
• e-newsletters
• News - Combined articles More

What's New?

Stuxnet-related threat discovered

Symantec is in the midst of analysing a newly discovered targeted threat that shares a great deal of code in common with the infamous Stuxnet malware.  Of note, it is apparent to Symantec that the authors of this new threat, dubbed ‘Duqu’, had access to the Stuxnet source code, not just Stuxnet binaries.  Therefore, it is possible Duqu was created by the same attackers that created Stuxnet.

Duqu’s purpose is to gather intelligence data and assets from entities such as industrial control system manufacturers, in order to more easily conduct a future attack against another third party.  The attackers are looking for information such as design documents that could help them mount a future attack on an industrial control facility.  Thus, Duqu is essentially a precursor to a future Stuxnet-like attack.

More details can be found in this analysis paper and on the following Symantec blog post.